Last Updated: December 15, 2025

This Privacy Policy explains how Dough, Inc. ("Dough," "we," "us," or "our") collects, uses, and protects your personal information when you purchase products through our platform. By making a purchase, you agree to this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you place an order, we collect: name, email address, phone number (if provided), shipping address, billing address, and payment information (processed securely through Stripe—we do not store full payment card numbers).

1.2 Information Collected Automatically

We automatically collect: IP address, browser type and version, device information, operating system, pages visited, time and date of visit, referring website, and cookies and similar tracking technologies.

1.3 Order Information

We collect details about your purchases, including products ordered, order history, transaction amounts, and delivery status.

1.4 Location Information

We may infer your general location from your IP address or shipping address to provide relevant services and comply with applicable laws.

2. How We Use Your Information

2.1 Transactional Purposes

We use your information to: process and fulfill your orders, send order confirmations, shipping updates, and delivery notifications, process payments and refunds, respond to customer service inquiries, and communicate about your specific orders or account.

2.2 Operational Purposes

We use your information to: prevent fraud and unauthorized transactions, comply with legal obligations, enforce our Terms, improve our platform and services, and analyze purchasing trends and customer behavior (in aggregate).

2.3 Marketing Purposes

Dough may use your contact information to send you marketing communications, including: information about new products and brands on the platform, special offers, discounts, and promotions, newsletters and content we think you may find interesting, and surveys and requests for feedback.

Your consent to marketing communications depends on your location:

For customers in the United States and other non-EU/UK jurisdictions: By making a purchase, you agree to receive marketing communications from Dough. You may opt out at any time by clicking "unsubscribe" in any marketing email or contacting us at team@dough.do.

For customers in the European Union, United Kingdom, or other jurisdictions requiring opt-in consent: We will only send you marketing communications if you have explicitly opted in at checkout or through another consent mechanism. You may withdraw your consent at any time.

Regardless of your marketing preferences, we will still send you transactional communications related to your orders.

3. How We Share Your Information

3.1 With Brand Partners

We share limited order information with the brand whose product you purchased to the extent necessary for fulfillment and customer service. This may include: products ordered, shipping address and delivery status, and general customer service inquiries related to the order.

We do not share your email address, phone number, or payment information with brand partners without your explicit consent. Brand partners may not use your information for their own independent marketing purposes unless you separately consent to receive communications from them.

3.2 With Service Providers

We share information with third-party service providers who assist us with: payment processing (Stripe), shipping and fulfillment, email and SMS communications, analytics and business intelligence, fraud prevention and security, and customer support tools.

These providers are contractually obligated to protect your information and may only use it for the specific services they provide to us.

3.3 As Required by Law

We may disclose information if required by law, court order, subpoena, or government request, or to protect the rights, property, or safety of Dough, our users, or others.

3.4 Business Transfers

If Dough is acquired, merged, or sells substantially all of its assets, your information may be transferred as part of that transaction. We will notify you of any such change.

4. Dough's Right to Contact You

4.1 Transactional Communications

Dough will contact you regarding your orders, including order confirmations, shipping notifications, delivery updates, customer service responses, and important account or policy updates. These communications are necessary to fulfill our contract with you and do not require separate consent.

4.2 Marketing Communications

Subject to the consent requirements described in Section 2.3, Dough retains the right to contact you for marketing purposes using the contact information you provide. This includes email, SMS (if you provide a phone number and consent to SMS), and postal mail.

4.3 Managing Your Preferences

You can manage your communication preferences at any time by: clicking "unsubscribe" in any marketing email, replying STOP to any marketing SMS, or contacting us at team@dough.do.

Opting out of marketing communications does not affect transactional messages about your orders.

5. Cookies and Tracking

We use cookies and similar technologies to: remember your preferences and cart contents, analyze site traffic and usage patterns, personalize your experience, measure advertising effectiveness, and serve relevant advertisements.

You can control cookies through your browser settings. Disabling cookies may affect site functionality, including the ability to complete purchases.

6. Data Retention

We retain your information for as long as necessary to: fulfill your orders and provide customer support, comply with legal and tax obligations, resolve disputes and enforce our agreements, and maintain business records.

Order and transaction records are typically retained for seven (7) years for tax and legal purposes. You may request deletion of your personal information subject to our legal retention requirements.

7. Data Security

We use industry-standard security measures to protect your information, including: encryption of data in transit and at rest, secure payment processing through PCI-compliant providers, access controls and authentication, and regular security assessments.

However, no system is completely secure. We cannot guarantee absolute security of your information.

8. Your Rights

8.1 All Customers

You have the right to: access the personal information we hold about you, correct inaccurate information, opt out of marketing communications, and request information about how your data is used.

8.2 California Residents (CCPA)

California residents have additional rights, including: the right to know what personal information is collected and how it is used, the right to request deletion of personal information (subject to legal exceptions), the right to opt out of the sale of personal information (we do not sell personal information), and the right to non-discrimination for exercising your rights.

To exercise your CCPA rights, contact us at team@dough.do.

8.3 EU and UK Residents (GDPR)

If you are in the European Union or United Kingdom, you have rights under the General Data Protection Regulation, including: right of access to your personal data, right to rectification of inaccurate data, right to erasure ("right to be forgotten"), right to restrict processing, right to data portability, right to object to processing, and right to withdraw consent at any time.

For GDPR purposes, Dough acts as the data controller. Our lawful bases for processing include: contract performance (order fulfillment), legitimate interests (fraud prevention, service improvement), legal obligations (tax and regulatory compliance), and consent (marketing communications).

You may also file a complaint with your local data protection supervisory authority.

To exercise your rights, contact us at team@dough.do.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where Dough is based. For transfers from the EU/UK, we use appropriate safeguards including Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our platform is not intended for children under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly. If you believe a child has provided us with personal information, please contact us.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. For significant changes affecting how we use your information, we may also notify you by email.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, or wish to exercise your rights, contact us at:

Dough, Inc.
Email: team@dough.do