TEMPLATE — NOT LEGAL ADVICE. This is placeholder text. Replace it with a policy reviewed for your business and location (e.g. California/CCPA) before taking real orders.

Privacy Policy (TEMPLATE)

Last updated: [DATE]

[BUSINESS LEGAL NAME] (“Doovra”, “we”) is an independent delivery service. We are not affiliated with In-N-Out Burger.

What we collect

Name, email address, phone number, delivery address and delivery notes you enter.
Your choices about order-update texts and promotional emails, and a summary of your paid orders with us (number of orders, dates and total spent).
Your order contents, amounts, tips and order status history.
Payment is processed by Stripe; we do not see or store your full card number. Stripe’s privacy policy applies to card data.
Your address is sent to a free geocoding service (U.S. Census Bureau geocoder, and/or OpenStreetMap Nominatim) to check it is inside our delivery area.

How we use it

To purchase, deliver and support your order, contact you about it, prevent fraud, and keep business records. We use your email address to send your receipt and messages about your order. If you tick “Email me weekly deals” at checkout, we also use it to send you Doovra deals and promotions (about once a week). If you separately tick “Text me weekly deals”, we send promotional texts (up to 1 per week) to the phone number you gave. Both boxes start unticked, are optional and not required to order; we keep a record of when you agreed. We do not share your phone number or text-message consent with third parties for their marketing. We do not sell your personal information. [EDIT]

Cookies and site visit data

We use only our own (first-party) cookies and browser storage. We do not use advertising cookies, third-party analytics or tracking pixels, and we do not let other companies collect information on our site.

dd_vid (1 year): a random ID that lets us count unique and returning visitors and see which link or ad first and last brought you to the site (referring website domain, utm_* campaign tags, and whether a Google Ads click ID was present — not the ID itself).
dd_sid (30 minutes, renewed while you browse): groups page views into one visit.
Admin and driver sign-in cookies are used only on those staff pages.
Browser storage on your device keeps your cart, links to your own orders, a referral code you arrived with (for up to 90 days), and that you dismissed the cookie notice.

For each page view we record the time, the page, the referring website’s domain, the campaign tags above and the visitor ID. We do not store your IP address; when no cookie is set we use a one-way code made from your IP address and browser type with a secret that changes every day, so visits cannot be linked across days. When you place an order, we attach this visit information (and any referral code) to the order so we know which links and promotions bring customers.

Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as an opt-out: we do not set the 1-year dd_vid cookie and count your visit only for that day. You can also delete our cookies in your browser settings at any time; ordering works without them.

Refer-a-friend

If you share your referral link, we keep your referral code, the first names of friends who ordered with it, and the credits you earned and used. If you use a friend’s link, we record the code on your order so your friend can receive their credit. Credits have no cash value.

Do Not Sell or Share My Personal Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). Because we don’t sell or share, there is nothing you need to opt out of — but you can always ask us to confirm, or send a request to access, correct or delete your information, at [EMAIL / PHONE]. We honor Global Privacy Control signals as described above. We will not discriminate against you for exercising your privacy rights.

Retention

[HOW LONG YOU KEEP ORDERS, e.g. X months/years for tax records.]

Your choices

Unsubscribe from promotions anytime: use the unsubscribe link in any promotional email, reply “unsubscribe”, or contact us below, and we will stop sending you promos. Unticking “Email me weekly deals” or “Text me weekly deals” on a later order also unsubscribes you from that channel. You will still get receipts and messages about orders you place. Reply STOP to any promotional text to stop promo texts (reply HELP for help); reply STOP to an order-update text to stop those. To access or delete your information, contact [EMAIL / PHONE].

Contact

[BUSINESS NAME, ADDRESS, EMAIL]