California Privacy Notice
Last Updated: October 9, 2026
This California Privacy Notice supplements the OnCater Privacy Policy and applies only to residents of California. It describes how OnCater LLC (“OnCater,” “we,” “us,” or “our”) collects, uses, and discloses personal information, and the rights California residents have under the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (together, the “CCPA”).
OnCater does not sell your personal information and does not share it for cross-context behavioral advertising.
Personal Information We Collect and How We Use It
In the past 12 months, we have collected the categories of personal information listed below. For more detail, see the “Information We Collect” and “How We Share Your Information” sections of our Privacy Policy.
| Category | Examples | Sources | Why we use it | Who we disclose it to |
|---|---|---|---|---|
| Identifiers | Name, email address, phone number, delivery address, account login, IP address | You; your device | Create accounts, process and deliver orders, communicate with you, provide support, security and fraud prevention | Restaurant Partners, delivery partners (such as DoorDash), service providers, your employer for Corporate Account orders |
| Professional information | Company name, job title, Corporate Account details | You; public business sources used to verify a company | Verify and manage Corporate Accounts, invoicing, business communications | Service providers, your employer for Corporate Account orders |
| Commercial and transaction information | Orders placed, menu selections, guest counts, delivery dates, amounts paid, invoices | You; Restaurant Partners; delivery partners | Process orders, payments, refunds, and invoices; customer support; improve our services; legal and tax compliance | Restaurant Partners, delivery partners, payment processors, service providers |
| Financial information | Card type, last four digits, billing ZIP code (full card numbers are held by our payment processor, not by OnCater) | You, through our payment processor | Process payments, refunds, and chargebacks; prevent fraud | Payment processors |
| Order notes, including allergy or dietary information | Special instructions and any allergy or dietary needs you choose to include with an order | You | Only to prepare and deliver your order safely | The Restaurant Partner preparing your order |
| Customer service information and reviews | Messages sent by email, phone, chat, or forms; reviews and ratings you post | You | Respond to questions, resolve issues, display reviews, improve our services | Restaurant Partners (as needed to resolve an issue), service providers; reviews are public |
| Internet and device activity | Pages viewed, links clicked, browser and device type, referring website, and how you scroll, click, and move around pages (session recordings and heatmaps) | Your device, through cookies and similar technologies | Operate and secure the website, analytics and usability research, improve our services | Service providers, including analytics providers such as Google Analytics and Microsoft Clarity |
| Approximate location | General location derived from your IP address or the delivery address you enter | You; your device | Show restaurants that deliver to your area, security | Service providers |
We may also disclose any category above to comply with the law or legal process, to protect the rights and safety of OnCater, our users, or the public, or in connection with a merger, acquisition, or sale of assets.
No Sale or Sharing of Personal Information
In the past 12 months, OnCater has not sold personal information and has not shared personal information for cross-context behavioral advertising, as those terms are defined by the CCPA. We do not knowingly sell or share the personal information of consumers under 16 years of age.
Sensitive Personal Information
If you choose to include allergy or dietary information with an order, we use it only to fulfill that order. We do not use or disclose sensitive personal information for purposes that would give rise to the right to limit its use under the CCPA, and we do not use it to infer characteristics about you.
Your California Privacy Rights
Subject to certain exceptions, California residents have the right to:
- Know and access the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to.
- Delete personal information we collected from you, subject to legal exceptions, such as information we need to complete an order, prevent fraud, or meet tax and legal obligations.
- Correct inaccurate personal information.
- Opt out of the sale or sharing of personal information. OnCater does not sell or share personal information.
- Limit the use of sensitive personal information, where applicable.
- Non-discrimination: we will not deny service, charge different prices, or provide a different level of service because you exercised your privacy rights.
How to Submit a Request
- Email: legal@oncater.com with the subject line “California Privacy Request”
- Phone: 1-888-669-1292
To protect your information, we will verify your identity before responding, usually by matching information you provide with information in your account. You may use an authorized agent to submit a request on your behalf. The agent must provide written permission signed by you, and we may ask you to verify your identity directly.
We will confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time, we may extend this by up to 45 additional days and will tell you why. Requests to know may be made up to twice in a 12-month period, free of charge.
Opt-Out Preference Signals and Do Not Track
We honor legally recognized browser opt-out preference signals, such as Global Privacy Control (GPC), as a request to opt out of the sale or sharing of personal information for that browser. Because OnCater does not sell or share personal information, no additional action is needed. Our website does not respond to browser “Do Not Track” signals, which are a different, non-standardized mechanism.
California “Shine the Light” Disclosure
California Civil Code Section 1798.83 allows California residents to ask whether we disclosed personal information to third parties for their own direct marketing purposes. OnCater does not disclose personal information to third parties for their own direct marketing purposes.
How Long We Keep Personal Information
We keep personal information for as long as needed to provide our services and for legitimate business and legal purposes. Account information is kept while your account is active. Order, payment, and invoice records are generally kept for 7 years to meet accounting and tax requirements. Customer service records and website activity data are kept for as long as needed to resolve issues, secure the website, and improve our services. When information is no longer needed, we delete or de-identify it.
Changes to This Notice
We may update this notice from time to time, and we review it at least once every 12 months. We will post the updated version on this page and change the “Last Updated” date.
Contact Us
OnCater LLC
Attn: Privacy / Legal Department
11750 Fair Oaks Mall, Unit M123
Fairfax, Virginia 22033
Email: legal@oncater.com
Phone: 1-888-669-1292