Last updated: March 7, 2023
Drizly Privacy Notice
Using your personal data in a fair and transparent way is important to Drizly, LLC (“Drizly” or “we”). When you use our desktop or mobile websites and applications (the “Platform”), we collect information about you, including information that can be used to identify you (“Personal Information”). Additionally, we may obtain Personal Information about you from our parent company, Uber Technologies, Inc. and its other subsidiaries (“Uber Parties”) and other third parties as described in this Privacy Notice. We collect this data to provide allow you to place orders and access other functionality on the Platform (the “Services”), as well as for the other purposes described in this Privacy Notice.
This Privacy Notice is intended to help you understand: (A) What Personal Information we collect, how we collect it, how we use it, and how we share it, (B) The choices you have related to your Personal Information, and (C) How we protect your Personal Information.
Please take a moment to review the terms of this Privacy Notice, which is incorporated into the Terms of Service governing your use of the Platform and Services, available here.
By accessing the Platform or using the Services, you agree that we may collect, process, and share your information (including Personal Information) consistent with this Privacy Notice and to the Terms of Service.
1. Types of Information We Collect
The following information is collected by or on behalf of Drizly:
- User Account Information
When you register for the Platform or use our Services, we ask that you provide information that can be used to personally identify you. This includes details such your full name, email address, phone number, date of birth, delivery address, and billing address.
- User Credentials
When you register for the Platform, you will be asked to provide credentials to allow you to access your account. These credentials may include a username, password, security questions, and responses to security questions.
- User Identifiers
We assign you one or more unique numbers or other identifiers that we use to identify you in Drizly’s internal systems and recognize you over time and across different devices, websites, and online services. These identifiers may be used in conjunction with cookies and other Technical Information.
- Payment Card Information
We collect and store the last four digits and expiration date of any payment card that you use to make a purchase on the Platform. However, we do not collect or store full payment card numbers on our systems. All payments are processed using a secure third party.
- Precise Location Data
In some circumstances, we collect precise geolocation data (geolocation data sufficient to identify a street name and name of a city or town) from your device when you access the Platform.
- User Content
We collect the data you submit when you contact Drizly customer support; provide ratings or feedback for products or retailers; or otherwise engage directly with Drizly personnel. User content may include photographs, or audio or video recordings submitted by you in connection with a customer support request. This also includes metadata relating to the method you use to communicate with Drizly.
- Usage and Device Data
We collect certain information automatically when you access the Platform or by using cookies, as described below and in our Cookie Notice. This Technical Information may include:
- Your browser type and operating system
- Your Internet Protocol (IP) address, which is the number automatically assigned to your computer whenever you access the Internet and that can sometimes be used to derive your general geographic area
- Websites you visited before and after visiting the Platform
- Pages you view and links you click on within the Platform
- Information collected through cookies, web beacons, and other technologies
- Information about your interactions with e-mail messages, such as the links clicked on and whether the messages were opened or forwarded
- Standard server log information
We may combine Technical Information that does not identify you with Personal Information. If we do so, we will treat the combined information as Personal Information under this Privacy Notice.
2. How We Collect Information
We may collect information from you in the following ways:
- From You Directly
We receive Personal Information directly from you when you provide it to us, such as when you register for the Platform or place an order. Additionally, you may be required to provide Personal Information when you contact us for support or with question so that we can respond appropriately.
- Using Tracking Technologies
We (or our vendors and partners) may use automated means to collect information about you and the device that you use to access the Platform. These automated means include technologies such as cookies, web beacons, and similar technologies (“Tracking Technologies”). These technologies help us analyze trends, administer the Services, track your interaction with the Platform, understand your preferences and habits. Tracking technologies may collect both Personal Information and Technical Information. They also allow us to provide you with recommendations and content that are tailored to you. For more details about the Tracking Technologies that we use and your choices regarding this tracking, please see our Cookie Notice.
- From Third Parties
We receive Personal Information from third parties that have legally obtained it, either directly from you or from other third parties.Third parties include Uber.
3. How We Use Your Information
We may use information that we collect from you for the following purposes, or as otherwise identified at the time of collection:
- Providing Services
We may use Personal Information to make the Platform and Services available to you. For example, we may use your Personal Information to:
- Create and update your account
- Facilitate your orders with Retailers
- Facilitate the fulfillment and delivery of your orders
- Facilitate your payment to Retailers
- Administer and manage your account
- Authenticate your identity
- Protect your account
- Provide you with updates about your orders and account
- Administer any contest or promotions, including winner notification and prize delivery
- Communicating with You
We may use your Personal Information to communicate with you. For example, we may send you text messages or other notifications (such as “push notifications” through your mobile device) about the status of your orders and deliveries. You may control how we communicate with you by adjusting your Notifications preferences in your Account Settings.
Drizly also uses the information we collect (which may include call recordings) to provide customer support, including to investigate and address user concerns and to monitor and improve our customer support responses and processes.
- Data Aggregation
We may use your Personal Information to create aggregated data records (collectively “Aggregate Data”). Some of this Aggregate Data is de-identified. We de-identify data by removing information (including any contact information) that would allow the remaining data to be linked back to you. We may use Aggregate Data for internal purposes, such as analyzing patterns, program usage, demographic trends, and user behavior patterns and preferences to improve our Services and for other lawful purposes.
- Compliance, Protection, and Safety
We may use your Personal Information as we believe necessary to comply with any applicable laws, court orders, subpoenas; to respond to lawful requests by law enforcement, regulators, or government entities; to detect, prevent, investigate or combat possible crime, such as identity theft, or other fraudulent activity; to protect the security of the Platform and Services; to enforce or apply our online Terms of Service or other agreements; to protect our own rights or property or the rights, property, or safety of our users or others; and to investigate or address claims or disputes relating to the Services.
- Research and Development
We use data for testing, research, analysis, product development and machine learning to improve the user experience. This helps us make our Services more convenient and easier to use, enhance the safety and security of the Services and develop new services and features.
Drizly performs the above activities on the grounds that they are necessary for purposes of Drizly’s legitimate interests in improving and developing new services and features.
- Marketing and Advertising
Drizly uses Personal Information to market its services, the services of Uber Parties, and other third-party partners. This may include:
- Sending emails, text messages, push notifications, and in-app messages or other communications marketing or advertising products, services, features, offers, promotions, sweepstakes, news and events.
This may include using your location, order history, and usage data to send marketing communications that are personalized based on your observed or inferred interests and characteristics. For example, we may send in-app messages offering discounts or promos for products similar to those that you have previously ordered.
- Displaying Drizly or Uber Party advertising on third-party apps or websites. This includes using your location, order history, and usage data, and sharing Personal Information with advertising partners, to personalize such ads to your interests.
- Displaying third-party advertising on the Platform or in connection with the Services.
This includes ads for specific products. These ads (which are identified as “Sponsored” or “Ads”on the Platform) may include recommendations that are personalized based on your location and order history.
This also includes ads for other third-party products or services that are personalized based on your observed or inferred interests and characteristics, which we determine using data such as orderhistory, usage data, demographic data, and device or user identifiers.
- Measuring the effectiveness of Drizly’s ads, and of third-party ads displayed on the Platform or in connection with the Services.
- Sending emails, text messages, push notifications, and in-app messages or other communications marketing or advertising products, services, features, offers, promotions, sweepstakes, news and events.
We may use analytics, machine learning, and data models (“Analytics”) to support our data processing activities. Some of our Analytics rely upon Personal Information that we collect from you, your interactions and use of the Platform, and from third parties. Using this Personal Information, our Analytics allow us to tailor our Services to your specific needs and preferences, provide certain services to our partners, and develop new features.
4. How We Share and Disclose Your Information
We disclose Personal Information to the following entities, or as otherwise identified at the time of collection:
- Retailers and Drivers
If you place an order using the Platform, we share details about your identity with the retailers, drivers that will be fulfilling your order. These parties use your information to deliver the products you ordered to the designated address and to verify the age and identification of the individual receiving the order.
- Delivery Services
In some cases, retailers may utilize third party services (such as Uber Eats) to deliver your order. We may share your Personal Information with these third parties as part of the Services
- Other Users of the Platform
If you place a gift order, the individual receiving the gift may be notified that it was sent on your behalf.
If you write a review on the Platform, the name you provide at the time you post the review will be visible to all other Platform users.
- Co-Branded Offerings
At certain times, we may provide you with access to deals, promotions, or opportunities (“Promotions”) in association with our partners. Such Promotions will identify the partner and indicate if they have a Privacy Notice that applies to their collection and use of your information. If you register for their products and/or services, communicate with these partners, or download their content or applications as part of a Promotion, you may be providing your information to both Drizly and the partner. If this is the case, we will provide disclosures as part of the Promotion. We are not responsible for our partner’s data practices and you should carefully review each partner’s Privacy Notices before participating in a Promotion that they are sponsoring.
- Affiliates and Business Transfers
We may share your Personal Information with our Uber Parties, our subsidiaries, and affiliates for use consistent with this Privacy Notice.
Additionally, we may share your Personal Information in connection with, or during negotiations of, a transaction that alters the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or a portion of our business, assets or stock, including a bankruptcy or similar proceeding.
- Service Providers
We provide data, including Personal Information, to vendors, consultants, research firms, and other service providers. These include:
- Payment processors and facilitators
- Background check and identity verification providers
- Cloud storage providers
- Data analytics providers
- Research partners, including those performing surveys or research projects in partnership with Drizly or on Drizly’s behalf
- Vendors that assist Drizly to enhance the safety and security of its apps
- Consultants, lawyers, accountants, and other professional service providers
- Insurance and financing partners
- Corporate Clients
If a company (such as your employer) pays for your order or places an order on your behalf, we may share your Personal Information with that company so it can verify that you received your order.
- Advertising Companies, Social Media Sites, and Brand Partners
We may provide your Personal Information to advertising companies (including marketing firms, audience analytics firms, advertising platforms, and consultants), social medial platforms, and brands that we partner with so that they (and Drizly) can better understand your purchasing habits and preferences. In some circumstances, we may also allow these companies to collect Personal Information directly from your browser or device through Tracking Technologies when you interact with the Platform. These companies may use the information we provide to determine how to direct advertisements and what individual or demographics to target, both on the Platform and elsewhere. They may also use this information to create or improve profiles about you that may be utilized by third party advertisers.
- Compliance with Laws and Protection of Rights
We may disclose your Personal Information as we believe necessary to comply with any applicable laws, court orders, subpoenas; to respond to lawful requests by law enforcement, regulators, or government entities; to detect, prevent, investigate or combat possible crime, such as identity theft, or other fraudulent activity; to protect the security of the Platform and Services; to enforce or apply our online Terms of Service or other agreements; to protect our own rights or property or the rights, property, or safety of our users or others; and to investigate or address claims or disputes relating to the Services.
- With Consent
We may share your data other than as described in this notice if we notify you and obtain your consent.
5. Data Retention and Deletion
Drizly retains user data for as long as necessary for the purposes described above. This generally means that we retain your Personal Information for the life of your account, and delete it 60 days after you request account deletion or your account is deemed inactive. Please see our Retention Schedule for additional information.
You may request deletion of your Personal Information at any time as described in more detail in the Choice and Transparency section of this Privacy Notice. Please note that we may retain your Personal Information after a deletion request due to legal or regulatory requirements.
6. Data Protection
We maintain a number of administrative, physical, and technological measures to protect the confidentiality, privacy, and security of your Personal Information. These controls vary based on the nature of the information and industry standards. Unfortunately, no website, server or database is completely secure or “hacker proof.” We therefore cannot guarantee that Personal Information you provide will not be disclosed, misused, or lost by accident or by the unauthorized acts of others.
Safeguarding your Personal Information is also your responsibility. We encourage you to change your passwords often, use a combination of letters and numbers, and make sure you are using a secure device to access the Platform. If you have reason to believe that the security of your account might have been compromised, or if you suspect someone else is using your account, please let us know immediately by sending an email to [email protected].
7. Choice and Transparency
You may exercise control over your Personal Information in the following ways:
- Device Permissions
Most mobile device platforms (iOS, Android, etc.) have defined certain types of device data that apps cannot access without the device owner’s permission, and these platforms have different methods for how that permission can be obtained. Please check the available settings on your device or check with your provider.
- Platform Inbox, Push Notification, and SMS Messaging
When you first register to use our Platform, you may authorize us to communicate with you through the Platform inbox, push notifications, and SMS messages. You can adjust these settings at any time in Drizly App by clicking the “Account” tab and then clicking the “Notifications” link.
- Email communications
We include an “unsubscribe” link in each electronic newsletter or promotional e-mail we send you. If you no longer wish to receive such communications from us, please click that link and follow any additional instructions.
- Tracking Technologies
Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings.If you do not accept cookies, you may experience some inconvenience in your use of the Platform. For example, we may not be able to recognize your computer or mobile device and you may need to log in every time you visit the Platform.
You may opt out of receiving interest-based advertising on the Platform by submitting a “Do Not Process” request using our Data Rights Request Form, and on certain other sites by following the instructions in the “Your Choices” section of the Cookie Notice.
- Updating and Correcting Your Information
If you are a registered Platform user, you have the ability to update or correct your Personal Information by accessing your profile page once you are logged in. If you are unable to make the necessary updates or corrections there, please request changes using our Data Rights Request Form.
- Deleting your Information
You may request that we delete your Personal Information from our systems using our Data Rights Request Form. Please note that it may take us several days to verify your identity and process your request.
8. Notice to Users in States with Privacy Laws
- The right to access your Personal Information
- The right to obtain your Personal Information in a portable format
- The right to have your Personal Information deleted from our databases
- The right to “opt-out” from having your Personal Information “sold” or “shared”, as those terms are defined under California Law.
- The right to “opt out” of personalized advertising on the Platform
9. Notice to Users Outside the United States and Canada
Drizly is based in the United States and only offers the Services in the United States and Canada. Regardless of where you access the Platform or Services, the information collected as part of that use will be transferred to and maintained on servers located in the United States. Any Personal Information that we obtain about you will be stored in the United States where data protection laws may not be as protective as those applicable where you live. By using the Platform or Services, you consent to this collection, transfer, storage, and processing of information to and in the United States.
before providing any Personal Information.
10. Personal Information About Underage Users and Children
You must be at least twenty-one (21) years of age to access the Platform or Services in the United States and eighteen (18) years of age to access the Platform and Services in Canada (the “Minimum Age” in that country). We do not knowingly request or collect Personal Information from any person under the Minimum Age. If we suspect a user is below the Minimum Age, we will close their account and take steps to delete their information. If you know of any individuals under the Minimum Age using the Platform, please email us at [email protected] so we can take action to prevent such access.
11. Contact Drizly
If you have any questions about this Privacy Notice or our privacy practices, or would like to contact Drizly’s Privacy Officer, please send an email to [email protected] or by write to us at:
Attn: Privacy Officer
177 Huntington Ave, Ste 1703
Boston, MA 02115-3153
We may occasionally update this Privacy Notice. If we make material changes, we will notify users by updating the “last updated” date at the top of this Privacy Notice and sending notice through email or the Platform. Your continued use of the Platform or Services after we have posted the revised Privacy Notice constitutes your agreement to be bound by the revised Privacy Notice to the extent permitted by law.