Last Updated: August 25, 2026
This Privacy Policy describes how Doughp Inc. ("Doughp," "we," "us," or "our") collects, uses, and shares your personal information when you visit or make a purchase from www.doughp.com (the "Site").
When you visit the Site or make a purchase, we collect information needed to operate our business, fulfill orders, and improve your experience.
Device Information
Collected automatically when you visit the Site. Includes browser type, IP address, device identifiers, time zone, cookie IDs, referring pages, and interactions with the Site.
Technologies Used
Cookies & Consent Management. Managed by our Consent Management Platform (Pandectes). Non-essential cookies load only after your explicit consent.
Log Files. Record connection data for site security and performance.
Web Beacons / Tags / Pixels. Used for analytics and advertising only after consent.
We do not record or transmit message content, keystrokes, checkout data, or other user communications.
Order Information
Collected when you purchase or attempt to purchase: name, billing / shipping address, payment details (processed securely by our payment processor), email, and phone number.
Support Information
Collected when you contact us for support (name, contact details, and the content of your message).
"Personal Information" includes all categories above.
Order Fulfillment: process payments, arrange shipping, provide confirmations.
Customer Communication & Support.
Fraud Screening.
Marketing & Advertising (With Consent): send marketing emails / texts only after opt-in; use analytics and advertising pixels only after cookie consent. We never use tracking technologies to intercept, monitor, or record communications between you and any party.
Analytics & Site Improvement.
We share data only as necessary and under written contracts requiring confidentiality and data-protection obligations.
| Category | Recipient | Purpose |
|---|---|---|
| E-commerce Platform | Shopify Inc. | Store hosting, checkout, payment routing |
| Analytics | Google Analytics (via Simprosys) | Site performance and marketing attribution |
| Advertising | Meta (Facebook), Pinterest, Google Ads | Targeted ads only after consent |
| Communications & Fulfillment | Klaviyo, Judge.me, Printful, GetSignpost, others listed below | Email / SMS marketing, reviews, fulfillment |
| Successor in Interest | Acquirer of the business or its assets | Transfer of the business, as described in Section 3.1 |
All third-party scripts (including Meta Pixel) operate through Shopify's consent layer and do not transmit form entries, health-related information, or checkout contents.
Doughp instructs its service providers to process only aggregated or de-identified data whenever feasible.
We may disclose or transfer Personal Information to a third party as an asset in connection with a merger, acquisition, financing, reorganization, bankruptcy, dissolution, sale of assets, or other transaction in which that third party assumes control of all or part of our business or assets. This includes our brand, website, customer and subscriber database, order history, reviews and user content, and related records. We may also disclose Personal Information to a prospective acquirer and its advisors during evaluation and negotiation of any such transaction, subject to written confidentiality obligations.
A successor receives Personal Information subject to this Policy and applicable law, and must honor any opt-out, unsubscribe, or Do Not Sell or Share election in effect at the time of transfer. If a successor intends to use or share Personal Information in a manner materially inconsistent with this Policy, it will provide notice and an opportunity to opt out before doing so.
Under the California Consumer Privacy Act, Cal. Civ. Code § 1798.140(ad)(2)(D), and Nevada Revised Statutes § 603A.333(2)(e), a transfer of personal information as an asset in a transaction of this kind is not a "sale" of personal information.
Managed through Pandectes CMP.
You may change or withdraw consent anytime via the "Cookie Settings" link in the footer.
Non-essential advertising and analytics tools are disabled by default until consent.
Opt-out portals: NAI, DAA, Facebook Ads Settings, Google Ads Settings.
If you decline tracking, Doughp disables all marketing pixels and does not share cookie identifiers with advertising partners.
We honor Global Privacy Control (GPC) and similar browser signals as valid opt-out requests for the "sale" or "sharing" of personal information.
Doughp acts as a party to the communication for ECPA purposes and uses data solely for legitimate business operations (order fulfillment, site performance, and user-authorized marketing).
Doughp does not intercept or disclose the contents of communications to any third party without consent.
Tracking technologies are deployed only after consent and in compliance with the Electronic Communications Privacy Act (18 U.S.C. § 2510 et seq.), the Federal Wiretap Act, and applicable state privacy laws.
We provide California residents with the rights described under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
You may exercise your rights to Know, Delete, Correct, Opt-Out of Sale or Sharing, and Limit Use of Sensitive Information through:
We do not knowingly sell or share the personal information of individuals under 16.
Transfers described in Section 3.1 are not sales of personal information under California or Nevada law. If we transfer your personal information as part of such a transaction, the recipient is required to honor any opt-out of sale or sharing request you submitted to us before the transfer.
We retain your Personal Information only as long as necessary to fulfill the purposes collected, comply with legal obligations, and resolve disputes.
Advertising and analytics data are periodically anonymized or deleted within 26 months.
We implement reasonable safeguards to protect your data.
Credit-card information is encrypted during transfer and processed through Shopify's PCI-DSS-compliant system.
No online transmission is completely secure, but we maintain commercially appropriate protections.
Our Site is not intended for individuals under 13.
We do not knowingly collect data from children under 13.
Parents and guardians may contact us to request deletion of any data inadvertently collected.
Your information may be processed in the United States and Canada, where our providers operate.
Transfers from the EEA / UK use Standard Contractual Clauses or equivalent safeguards.
We may update this Policy periodically. Updates are posted here with a new "Last Updated" date and apply prospectively from that date, governing our handling of Personal Information from that date forward, including Personal Information collected earlier. We will not apply changes retroactively in a manner that would violate applicable law.
Doughp Inc. Attn: Privacy Compliance Officer 1810 E Sahara Ave., Ste 346, Las Vegas, NV 89104 USA compliance@doughp.com
If our business or assets are transferred as described in Section 3.1, requests submitted under this Policy will be routed to the successor, and we will post the successor's contact information on the Site.
No Private Right Created. This Policy is for transparency only and does not create contractual or third-party beneficiary rights.
Governing Law & Venue. Any dispute arising from this Policy or your use of the Site is governed by Nevada law and resolved exclusively in the state or federal courts of Clark County, Nevada, unless otherwise required by law.
Limitation of Liability. To the maximum extent permitted by law, Doughp disclaims liability for incidental, indirect, or consequential damages arising from data collection or disclosure consistent with this Policy.
Arbitration Disclaimer. No arbitration provision applies to claims under this Privacy Policy unless you separately opted into Doughp's SMS/MMS Program Terms that expressly include arbitration.
Effective upon publication on the Site.
