Now open · Fresh bins every Thursday · $12 down to $1

Privacy and cookies

What we collect, what we use it for, and how to opt out. No small print.

Updated 29 October 2026.

Who we are

The Daily Drop is a trade name of Sharks Investments, LLC, a Texas company, at 11633 Harry Hines Blvd, Ste 104 & 105, Dallas TX 75229. "We" and "us" in this policy mean Sharks Investments, LLC, doing business as The Daily Drop.

Text and email alerts

If you sign up for alerts we keep your name, email and/or mobile number, the language you chose and the time you signed up. We use them for one thing: telling you when fresh stock lands and when it is $1 day.

We do not sell or share your details with anyone for their own marketing.

Membership

When you join as a member we collect your full name, email address, mobile number and postal address (street, city, state and ZIP code). We also keep your member number, the version of the Member Terms you accepted and when, whether you opted in to text messages, your check-in visits, your points and how you earned them, your purchases at the till when your member card is added to the sale, and any member gift you collected. If you choose to set a password we keep only a protected (hashed) version of it. To prevent misuse we record the IP address and browser used to join, and the IP address of failed sign-in attempts.

We use this to run your membership (sign-in codes, your member card, points, check-ins and gifts), to contact you about your membership, to send you marketing by email and post and show you our marketing online as set out in the Member Terms, and to stop the same person collecting more than one member gift.

Your sign-in codes are sent by email through Cloudflare Email Service.

The same code is also sent by WhatsApp to the mobile number on your membership, through WhatsApp Business (Meta Platforms, Inc.). WhatsApp receives your mobile number and the code only to deliver the message.

When you check in with the code at the entrance, or scan the Lucky 200 code, your phone shares its location once so we can confirm you are at the store during opening hours. We keep only how far you were from the store and how precise the reading was, not where you were.

Points and purchases

To give you points for what you buy, we link your membership to a customer record in our point-of-sale system, which is provided by Square, Inc. We share your name, email address, mobile number and member number with Square for this, and Square stores your points balance and that you are a member. Square processes your payments under its own privacy notice (squareup.com/legal/privacy).

When staff add your member card to a sale, Square sends us the date, the items, the amounts, any refund and a link to Square's receipt. We use this to work out your points and show your purchases in your member area.

If staff added you to a sale as a Square customer before you joined, those sales can be credited to you when you join and confirm the same email address.

When a shopper who is not a member is added to a sale as a Square customer, we keep that sale for up to 90 days so it can be credited if they join, and then delete it.

Points expire after 12 months without points activity, as set out in the Member Terms.

Recognising members

As a member, our cameras and systems create and keep: a set of measurements of your face (face geometry); measurements of how you walk and your body proportions (gait); for each visit, the times you arrived and left; the vehicle plate, make, model and colour we saw you arrive in; and a profile of your purchases (what you bought, how much you spent and the kinds of goods you like).

We use them to recognise you when you arrive; to let the staff member on duty know, with your full name, phone number, last visit, last spend, usual interests and points balance; to personalise offers; to remind you if you have not visited for a while (only by channels you agreed to); for security and loss prevention; and to understand returning visits.

Who processes it for us: our hosting providers in the United States, Vultr (the camera server) and Cloudflare (our database and file storage); an AI image-analysis provider, Anthropic, which checks individual camera images on our instructions; and WhatsApp Business (Meta Platforms, Inc.), which delivers arrival messages to our staff member's phone and offers and reminders to you. Arrival messages contain your full name, phone number and visit and spending details, never images or biometric data. We never sell, lease or trade biometric information, and we disclose it only where the law requires.

Biometric information is stored encrypted on our own camera server, and only the store owners can access it. Face and gait measurements and the recordings linked to your membership are kept while you are a member and deleted within 90 days after you end your membership.

You can ask to see what we hold about you, correct it, delete it, or end your membership (which ends recognition), by emailing contact@dailydropdfw.com or speaking to staff.

Marketing on social media and online

To show members our ads on platforms such as Facebook, Instagram and Google, we may upload your email address to those platforms in a protected (hashed) form so they can match it to your account. They use it only to show our ads, not for their own marketing. Mobile numbers and text-message opt-ins are never shared for this.

You can unsubscribe from marketing emails at any time with the link in each email or by contacting us.

As set out in the Member Terms, we may also send members offers and reminders by WhatsApp to the mobile number on their membership. Reply STOP to any WhatsApp message to opt out.

If you would rather your email address is not used to show you our ads, email contact@dailydropdfw.com and we will leave it out of future uploads.

Filming and photography

We film and photograph in the store and the parking lot, including for social media. Signs at the entrance say so. Members agree under the Member Terms that footage of them, including their shopping visit, may be published in our marketing, on social media, on our website and in messages to members.

If you win a prize or giveaway we may publish your first name, your city, photos and video of you, and the prize you won.

If you would rather not appear in a particular video or photo, tell a member of staff before filming starts.

How long we keep member details

We keep your member details while you are a member. Sign-in codes and records of failed sign-ins are deleted after 30 days, and sign-ups that are never confirmed are deleted after 30 days.

If you ask us to end your membership, we delete your details, points and purchase list from our system and delete your customer record in Square. Square keeps its own records of sales and payments as the law and its terms require, and we keep any records we must keep by law. Footage already published under the Member Terms may stay published. To ask, email contact@dailydropdfw.com or speak to staff.

Age

Membership is for people aged 18 or older. We do not knowingly collect personal information from children under 13.

SMS message consent

When you opt in to receive SMS communications from The Daily Drop, we collect your phone number and any other necessary information to communicate with you via text messages. This information is not shared with third parties for marketing purposes. We respect your privacy and are committed to keeping your data secure.

SMS message frequency and fees

The frequency of SMS messages may vary based on the type of communication you are receiving. Please note that standard message and data rates may apply, depending on your carrier’s pricing plan. These fees may vary if the message is sent domestically or internationally.

SMS opt-in

By providing your phone number and checking the box, you agree to receive text messages from The Daily Drop. Message and data rates may apply. Message frequency varies. Consent is not a condition of purchase.

SMS opt-out

If you are receiving text messages from us and wish to stop receiving them, simply reply STOP to the number from which you received the message. Once we receive your message, you will no longer receive further text messages from us. For help, reply HELP, call (469) 522-9900 or email contact@dailydropdfw.com.

SMS privacy policy

The Daily Drop maintains strict privacy policies, ensuring that personal information of our customers is not shared, sold, rented, released or traded to third parties for marketing or promotional purposes without prior consent or a legal obligation. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. No mobile opt-in data will be shared with third parties.

Pallet enquiries

What you type into the pallet form (name, business, email, phone and your message) is kept so we can reply. Nothing else.

Cookies and measurement

We use analytics and advertising cookies (Google and Meta) to see how the site is used and which ads bring people in. They are on by default. You can decline with the notice that appears when you arrive (it shows for a few seconds), or at any time with the “Cookie choices” button at the bottom of this page; your choice is remembered in this browser.

When you decline, the analytics and advertising signals are switched off and any existing cookies from those services are cleared. The site works exactly the same.

When you become a member, we tell Meta (Facebook and Instagram) about the sign-up so we can see which of our ads bring members in. With it we send a scrambled (hashed) copy of your email, phone, name, city, state and ZIP code, which Meta can only use to match the sign-up to an ad; it never sees the details themselves. We don’t send this if you have declined cookies.

We also keep our own record of each visit: the page you landed on, where you came from (for example the Google ad reference or the name of the Meta ad), your approximate town, the kind of device, the pages you viewed, and whether you tapped call, WhatsApp, directions or email. It shows us which ads bring customers in. It does not include your name or contact details, it is deleted after 14 months, and nothing is recorded if you have declined cookies.

Cloudflare, which hosts the site, may set a strictly necessary cookie for the bot check (Turnstile) on the forms.

If you arrive from a Google ad, we keep the click reference Google adds to the link with your visit or your form. If you then become a member, or your enquiry, call or WhatsApp message turns into a sale, we report that reference, the time and, for a sale, the amount back to Google Ads so it can see which ads work. We do not send your name or contact details.

Security cameras and recognition

The store and the parking lot have security cameras. They record video and may also record audio, which may be transcribed into text. In the parking lot the cameras may read vehicle number plates. Signs at the entrance tell you this before you come in.

Our systems use facial recognition and measure how people walk and what they are wearing. We use this to tell our staff apart from customers, to follow a visit from camera to camera, to prevent loss, and to count how often the same visitor returns.

If you are not a member, you are given a unique customer number (for example "Customer #0123") instead of your name. By entering after the notices at the door and in the parking lot, you agree to this. We use that number to recognise you on later visits and to count your visits (dates, days of the week, usual arrival time, and whether you queue before opening). It is linked to your name only if you become a member.

We use these records for security, for loss prevention and to understand how the store is used, and we check them against our till records (for example sales, refunds and cash-drawer openings). Only the store owners can view them. We never sell, lease or trade biometric information, and we disclose it only where the law requires.

Face and gait measurements of visitors who are not members are deleted within 12 months of their last visit. Still images are deleted after 90 days. Other camera records are kept for as long as we need them for security, and biometric records never longer than one year after that purpose ends.

You can ask us to delete the anonymous record of your visits by emailing contact@dailydropdfw.com.

Where the data lives

Sign-ups are stored in a Cloudflare database in the United States. Only The Daily Drop team and the agency that runs the site have access.

Your choices

You can ask to see, correct or delete your details at any time. Email us and we will do it.

Contact

Call us at (469) 522-9900 or email us at contact@dailydropdfw.com.

WhatsApp