Privacy Policy

Last updated: October 2, 2026

Scope

This Privacy Policy explains how Drugstore Inc., a Delaware corporation authorized to do business in New York, and our affiliates, including Drugstore West Village LLC, which operates our West Village location (“Drugstore,” “we,” “us”), collect, use and share personal information when you use our website at drugstore.cafe, place online orders, use our mobile app or loyalty program, sign up for emails or texts, or otherwise interact with us online (the “Services”). It also covers information we collect about you in our restaurants when we tie it to your account or order. It does not cover third-party sites or services that we link to.

By using the Services, you agree to this Policy and our Terms of Use.

Personal Information We Collect

Information you give us.

• Account and contact details: name, email address, phone number, and password when you create an account or join the loyalty program.
• Order information: items ordered, pickup time and location, special instructions, and order history.
• Payment information: you enter card details directly into our third-party payment processor. We receive a token, the card type, the last four digits and billing ZIP, but we do not store your full card number.
• Communications: messages, feedback, reviews and anything you send us, including your marketing preferences and SMS opt-in.

Information we collect automatically. When you use the Services we collect device and usage data, including IP address, browser and device type, operating system, pages viewed, links clicked, referring pages, and the date and time of your visit. We collect this through cookies, pixel tags, web beacons and similar technologies. In the app we may collect an app identifier and, with your permission, approximate location to show the nearest location.

Information from other sources. We may receive information from our payment processor, ordering and loyalty vendors, and, if you sign in or interact with us through a social platform, from that platform, in line with your settings there.

How We Use and Disclose Your Information

How we use it. We use personal information to:

• Provide the Services: create and manage accounts, take and prepare orders, process payments, run the loyalty program and provide customer support.
• Communicate with you: send order confirmations, receipts and service messages, and, if you have opted in, marketing emails and texts.
• Improve and personalize: analyze how the Services are used, fix problems, develop new menu items and features, and tailor offers.
• Protect Drugstore and our customers: detect and prevent fraud, abuse and security incidents, and enforce our Terms.
• Comply with the law and respond to lawful requests.

How we disclose it.

• Service providers that work for us, such as payment processing, online ordering, hosting, analytics, email and SMS delivery, and customer support, who may use the information only to perform services for us.
• Affiliates, including Drugstore West Village LLC and other Drugstore locations, to operate the business and the loyalty program.
• Professional advisors, such as lawyers, accountants and insurers.
• Authorities and others when we believe disclosure is required by law or needed to protect rights, safety or property.
• Buyers and investors in connection with a merger, financing, sale of assets or similar transaction.
• Anyone else with your consent or at your direction.

We do not sell your personal information for money. We do not share mobile phone numbers or SMS opt-in consent with third parties for their own marketing purposes.

Your Privacy Choices and Rights

Marketing emails. Click “unsubscribe” in any marketing email or email admin@drugstore.cafe. We will still send order and account messages.

Text messages. Reply STOP to any marketing text to opt out, or HELP for help. Message and data rates may apply.

Cookies and tracking. Most browsers let you block or delete cookies, and your device settings let you limit app tracking and location access. Blocking cookies may affect how the Services work. Where required, we will ask for your consent to non-essential cookies. We will honor opt-out preference signals, such as Global Privacy Control, where the law requires.

Account information. You can review and update your account details in your account settings, or ask us to at admin@drugstore.cafe. You may also ask us to delete your account, subject to the exceptions in the state notices below.

Security, Retention and Transfers

Security. We use reasonable administrative, technical and physical safeguards to protect personal information, and our payment processor handles card data under industry security standards. No system is perfectly secure, so we cannot guarantee absolute security. Please use a strong, unique password.

Retention. We keep personal information for as long as you have an account or use the Services, and as needed to provide them, meet legal, tax and accounting obligations, resolve disputes and enforce our agreements. When we no longer need it, we delete or de-identify it.

International transfers. The Services are operated in the United States. If you use them from elsewhere, your information will be transferred to, stored and processed in the U.S., where privacy laws may differ from those where you live.

State Privacy Notices

California residents. Under the California Consumer Privacy Act (CCPA/CPRA), California residents may have the right to know what personal information we collect, use and disclose; to access a copy; to correct inaccurate information; to delete personal information; to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising; to limit use of sensitive personal information; and not to be discriminated against for exercising these rights. In the past 12 months we have collected the categories described above under Personal Information We Collect (identifiers, commercial information, internet activity, and payment-related information held by our processor) for the purposes described under How We Use and Disclose Your Information, and disclosed them to the categories of recipients listed there. To make a request, email admin@drugstore.cafe. We will verify your identity before acting, and an authorized agent may submit a request for you. California’s “Shine the Light” law lets residents ask which personal information we shared with third parties for their direct marketing; email admin@drugstore.cafe to ask.

Nevada residents. Nevada law lets residents opt out of the sale of certain personal information. We do not sell covered information, but you may submit a request at admin@drugstore.cafe.

Other states. Residents of other states with comprehensive privacy laws (for example Colorado, Connecticut, Virginia and Texas) may have similar rights to access, correct, delete and port their data and to opt out of targeted advertising and sales. Email admin@drugstore.cafe to submit a request. If we deny a request, you may appeal by replying to our response, and we will respond within the time the law requires.

Children’s Information and Other Provisions

Children. The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us at admin@drugstore.cafe and we will delete it.

Third-party links. The Services may link to other sites whose privacy practices we do not control. Please read their policies.

Changes to this Policy. We may update this Policy from time to time. We will post the new version with a new “Last updated” date and, for material changes, give notice as the law requires.

Contact Us

Questions or requests about this Policy or your information? Contact Drugstore Inc., 418 Broadway #8089, Albany, NY 12207, USA, or admin@drugstore.cafe.