SOLD AND DELIVERED BY DOUGHLOCAL

Privacy

Information used for your order

DoughLocal uses your name, contact details, verified delivery address and order details to process payment, arrange supplier stock, pack and deliver your order, handle recalls and provide support. Authorized staff and the franchisee assigned to your delivery postcode can access the order and contact details needed to fulfil and support your delivery. DoughLocal remains your seller and payment recipient. Your private order link should not be shared.

PayPal processes payments. Google Places may verify addresses, and Google Routes and Google Maps assist with driving directions. Hostinger hosts the service; Cloudflare provides traffic and security services where configured. Those services may process information outside Australia under their own terms. DoughLocal does not collect card or bank account details in its checkout.

Session cookies support your basket and security. To show administrators a five-minute activity count, we temporarily record a hashed browser-session identifier, your account identifier when signed in, and the latest activity time. We do not record browsing history or location for this counter; expired activity records are removed by subsequent activity updates or scheduled cleanup. Google Analytics 4 is used on public pages for visits and usage measurement and may set analytics cookies. Order, payment and admin pages do not include the analytics tag.

Interest in future delivery areas

Customer registration stores your name, email address, a securely hashed password, email verification status and your chosen postcode with planning consent. We use postcode counts to prioritise delivery expansion and distinguish verified accounts from unverified registrations. Launch emails are optional and require separate consent. You can change your postcode or withdraw postcode interest and launch email consent in your account; withdrawing removes your postcode from demand counts and keeps your account. Contact admin@doughlocal.com to request account deletion. Earlier anonymous interest records contain only a postcode, consent time and hashed session identifier and are retained for up to 12 months. Security rate-limit records limit abuse.

Contact DoughLocal about access, corrections or privacy concerns. Order and payment records are retained where needed for fulfilment, accounting, legal obligations and dispute handling. Before launch, the owner must confirm the final retention arrangements and service-provider disclosures.