Legal

Privacy Policy

Last updated August 24, 2026

This policy explains what DG Doughnuts collects when you order through our website or our Android and iOS apps, why we collect it, who we share it with, and how you can get it deleted. We do not sell your personal information.

Information we collect

  • Account info — name, email address, phone number and password (stored hashed, never in plain text).
  • Order info — the items you order, pickup or delivery choice, scheduled times, tips, notes and order history.
  • Delivery addresses — any addresses you save, plus delivery notes you add.
  • Vehicle details — if you use curbside, the car make, color and license plate you choose to save.
  • Payment info — card payments are processed by our payment providers (Square and/or Stax). We never see or store full card numbers. We store only a provider token, the card brand and last four digits if you choose to save a card.
  • Location — only when you tap “I’m here” for curbside arrival, or ask the app to find your nearest shop. Location is used at that moment and is not tracked in the background.
  • Device & notification tokens — a push token so we can tell you your order is ready, plus basic device/platform information.
  • Rewards data — Dough points, wallet balance, gift cards, coupons and Dough Pass subscription status.

How we use it

To take and fulfill your orders, run Dough Rewards and Dough Pass, send order status updates and receipts, handle refunds and support requests, prevent fraud and abuse, and understand which items sell so we can bake the right amount.

Who we share it with

Only with service providers who help us run the shop, and only with what they need: payment processing (Square, Stax), order notifications (email and SMS providers), hosting and database (Supabase and our hosting provider), push delivery (Apple and Google), address lookup (Google Maps), and delivery partners when you choose delivery. We also share information when the law requires it.

Data retention

Account and order records are kept while your account is active and for as long as we need them for tax, accounting and dispute purposes. When you delete your account we remove your personal profile, saved addresses, vehicles, saved card tokens and push tokens, and we anonymize past order records we are required to retain.

Deleting your account

You can delete your account and personal data at any time from this page, or in the app under Profile → Security → Delete account. Deletion is permanent: remaining wallet balance, Dough points and coupons are forfeited, so redeem them first.

Children

Our apps are not directed to children under 13, and we do not knowingly collect information from them.

Your choices

You can turn push, email and SMS notifications on or off individually in the app, revoke location permission in your device settings, remove saved cards and addresses, and request a copy of your data by emailing us.

Contact us

DG Doughnuts
29 W McKey St Ste 200 · Ocoee, FL 34761-2614
Dg@dgdonuts.com
(407) 614-8609