Privacy Policy

1. Information We Collect

a. Information you provide

We collect the following types of Personal Information directly from you:

• Contact information. When you use or interact with the Services, we collect or obtain relevant contact details from you, including your name, telephone number, and email address.
• Account information. When you set up a Fuel Friendly account, we collect your username and password, and other relevant information we request.
• Order information. If you place an order through the Services, we collect information necessary to fulfill the order, including your delivery address, the date and time of the order, the items you ordered, and any special instructions. In certain jurisdictions, drivers may use personal dashcams. Fuel Friendly prohibits recording of private conversations or customer residences unless required by law or permitted by customer consent.
• Age and identity verification information. If you order alcohol, prescriptions, or other age- or dollar-amount restricted orders, we collect information from your government ID to verify your age or identity, including the government ID number and state or country.
• Vehicle information. For fueling orders, we may collect your vehicle license plate number(s).
• Payment information. If you place an order through the Services, we collect your billing address and method of payment.
• Interaction with your personal shopper. When you place an order for delivery, you may communicate with your personal shopper via the Services about product replacements and other questions. We collect the information contained in those communications.
• Information you make public. If you post in a public space on the Services, or otherwise choose to make your Personal Information public (e.g., by sharing a recipe publicly), we collect such information. We cannot control the actions of third parties who may access or collect information you share publicly.
• Other information you provide to us. This includes survey responses (e.g., customer satisfaction surveys), information provided during interactions with customer service representatives, and information you provide about an experience with one of our retailers.
• Information you provide about others. For example, when you refer a friend, send a gift delivery or gift card, or participate in Family Accounts, we may collect the recipient's name, email, and delivery address. You are responsible for ensuring you have permission to share someone else's information with Fuel Friendly. You may not provide Personal Information about children under the age of 16.

b. Information collected by automated means

When you use and interact with the Services, we automatically receive certain information about your device, browser, and/or activity:

• Device and usage information. Our servers record information about the device you use to connect to the Services and your usage of them.
• Browser and activity information. We collect information about your activity and interactions with the Services, including products you engage with or add to your cart, order-related information, pages you navigate to, and the frequency and duration of your use. We also track interactions with our chatbots, emails, texts, and notifications (e.g., whether you opened or clicked an email), and may use third-party session-replay tools that record clicks, mouse movements, scrolls, and keystrokes to diagnose usability issues.
• Device information. This includes your device's IP address, device type, browser type and settings, internet service provider, operating system, and unique device identifiers.
• Location information. If you allow location access through your device or browser permissions, we may collect your device's precise location to facilitate pickup order hand-offs, improve delivery accuracy, help you find nearby stores, and for analytics. You can control location sharing through your device or browser settings, or when prompted by the app. We may also infer your general location, for example from your IP address.
• Cookies, pixels, and other tracking technologies. We (and our partners, advertisers, and third-party advertising networks) use device identifiers, cookies, pixels, tags, APIs, SDKs, and similar technologies to make the Services function properly, understand usage, personalize your experience, and measure and customize the advertisements you see.

c. Information received from third parties

We may receive Personal Information about you from third parties, including:

• Third-party services. If you log in via a third-party service (e.g., Facebook or Google), we may receive information such as your name and email address.
• Retailers. We may receive information from retail partners whose loyalty programs you participate in, such as confirmation of your loyalty status, and may share transactional data with the retailer to apply discounts and personalize your experience.
• Prescriptions. If you use the Services for prescription delivery, the processing pharmacy provides us your name, delivery address, email, birth date, phone number, the total charged amount, prescription number(s), and refill information (if applicable), along with whether the product requires temperature control. If a delivered prescription product is recalled, the pharmacy will share your name, email, order date, and refund amount with us.
• Business partners and service providers, including: service providers (market research, delivery, map services, email/SMS platforms, and our restaurant-order fulfillment partner); Fuel Friendly Partners who have implemented our Services on their sites (e.g., a Shoppable Recipe button); co-branded partners; marketing and advertising partners (for measurement, analytics, and attribution); payment partners; and partners assisting with fraud prevention or dispute handling.
• Other third parties, including other customers who refer you or send you a gift; personal shoppers in connection with your delivery; law enforcement, public health, and other government authorities; and publicly available sources.

2. Payment Processors and Partners

When you pay using a credit card or other payment method, your payment information (e.g., Google Pay, FSA/HSA) is collected and processed by our third-party payment processors. We may receive limited information back from them, such as the last 4 digits of your card number and its expiration month and year.

We also offer payment partners — such as PayPal or "Buy Now Pay Later" services — that may redirect you to their own websites to submit payment information. Their privacy policies apply to information you provide to them directly.

If you place a restaurant order, our restaurant partner will collect and process your payment information to fulfill that order.

3. Information Use

We use the Personal Information we collect for the following purposes:

• Provide and manage the Services.
• Process your transactions, including payment processing and delivery facilitation. Fuel Friendly Shoppers and Drivers are bound by internal policies and may only use customer data for order fulfillment, and must delete it after delivery.
• Provide customer support and respond to your inquiries.
• Communicate with you, including updates about the Services and changes to this Privacy Policy or other terms.
• Carry out marketing and advertising activities, including interest-based advertising, using cookies, pixels, tags, APIs, SDKs, and similar technologies.
• Customize and personalize the Services based on how you browse, use, or interact with them.
• Identify usage trends and improve the Services, including research, analytics, and feature testing.
• Maintain security and prevent fraud, including detecting and investigating unauthorized or unsafe activity.
• Satisfy legal obligations, including responding to legal process and law enforcement requests.
• Community affairs efforts related to our mission.
• As otherwise necessary or appropriate, including at your direction or with your consent.

We may combine Personal Information collected as described above with information from other sources, and use the combined information for the purposes described in this Privacy Policy.

4. Information Disclosure

We may disclose your Personal Information to the following categories of recipients:

• Our affiliates and subsidiaries, for purposes consistent with this Privacy Policy.
• Service providers and third-party partners, including cloud storage, hosting, research, data security, fraud prevention, payment processing, delivery, analytics, legal services, map services, and email/SMS communications providers.
• Marketing and advertising partners, including social media platforms, advertising networks, and other websites/publishers, some of whom may use cookies or trackers to serve tailored ads across services.
• Analytics providers, such as Google Analytics, which help us understand usage and ad performance.
• Personal shoppers, who receive your information to pick up and deliver your order (access ends once delivered).
• Retailers, for order preparation and, where required by law, for regulated sales such as alcohol (which may include your name, delivery address, government ID information, purchase details, and signature). Retailer loyalty card information is also shared when linked.
• Parties involved in legal matters, where disclosure is reasonably necessary to comply with laws, regulations, or legal requests.
• Third parties in a sale or business transaction, such as an acquisition, asset sale, or bankruptcy/reorganization proceeding.
• Co-branded product partners, such as co-branded credit card providers.
• Other third parties, at your direction or consent, or as necessary to comply with law, protect our operations, protect rights and safety, or pursue available remedies.

We may disclose Personal Information for other reasons described at the time of collection or before sharing.

5. Summary Table of the Personal Information We Collect and the Parties to Whom We Disclose It

The table below summarizes the categories of Personal Information collected in the past twelve (12) months, the sources of that information, the recipients to whom we've disclosed it for business purposes, and the recipients with whom we've shared or sold it for cross-context behavioral or targeted advertising ("Behavioral Advertising").

We also disclose your information as explained above to law enforcement or government agencies.

6. Prescription Deliveries

If you use the Services for a prescription delivery, we collect information from the processing pharmacy as described in Section 1. Some of this information may relate to your past, present, or future physical or mental health or condition; the provision of health care to you; or your past, present, or future payment for health care ("Personal Health Information"). This Section governs our use and disclosure of Personal Health Information, and controls over any conflicting terms elsewhere in this Privacy Policy or the Fuel Friendly Terms of Service.

To the extent we receive, create, maintain, use, or disclose Personal Health Information, we maintain its privacy and security as required by applicable law, including HIPAA, and take steps to safeguard protected health information in accordance with pharmacy and regulatory requirements.

If you reside in the U.S., your Personal Health Information is protected under HIPAA and applicable state law. When you place a pharmacy order, the pharmacy discloses to us your status as a patient and, where selected, your refill information — this status is protected by HIPAA. Refer to your pharmacy's Notice of Privacy Practices for a complete description of your rights. We will not disclose your Personal Health Information without your prior written consent, except: (i) as necessary to provide the Services; (ii) to your pharmacy on their instruction; (iii) if the information has been de-identified; (iv) as required by law; or (v) in connection with a business transaction or bankruptcy proceeding.

7. Children's Privacy

The Services are not designed for or directed to children under 16, and we do not knowingly collect Personal Information from children under 16. If we become aware that we have received such information, we will take reasonable steps to remove it from our records. In compliance with the Children's Online Privacy Protection Act (COPPA), Fuel Friendly also does not knowingly collect information from children under 13.

8. Third-Party Websites

Some links on the Services may redirect you to third-party websites and services we do not operate, and we may offer social sharing tools that connect the Services with other websites. Those third parties' own privacy policies govern their practices — review them before disclosing any Personal Information.

9. Information Security

We employ and maintain reasonable administrative, physical, and technical measures designed to safeguard Personal Information under our control from unauthorized access, use, and disclosure.

When we collect, maintain, access, use, or disclose Personal Health Information, we do so using systems and processes consistent with applicable federal and state privacy and security requirements, including HIPAA. However, no data transmission or storage system is completely secure, and we cannot guarantee the security of your information.

10. Information Retention

We keep Personal Information only as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information; the potential risk of harm from unauthorized use or disclosure; the purposes for which we use it; whether those purposes can be achieved through other means; and applicable legal retention requirements or rights.

11. Your Privacy Choices

Depending on your place of residence, you may have certain rights and choices regarding our use of your Personal Information. Requests may be subject to applicable exceptions, and we will not discriminate against you for exercising these rights.

a. Correct or update your account information and settings

If you have a Fuel Friendly account, you may review, correct, or update your information (name, phone number, delivery address, payment information) anytime via your Account Settings page. Changes to settings may take some time to take effect. If you no longer have account access, email us to submit your request.

b. Exercise your marketing choices

We may send periodic marketing and promotional emails, push notifications, or text messages, obtaining consent where legally required. You may opt out via the instructions in any communication or through your Account Settings. Even after opting out of marketing, we may still send administrative and transactional messages that cannot be opted out of.

c. Request to access or delete your Personal Information

You may request a copy of your Personal Information or request that we delete it. Before processing a request, we verify the requestor's identity by matching up to three pieces of Personal Information against our records.

• Account holders: email support@gofuelfriendly.com and you'll be prompted to re-log in to the Services.
• Non-account holders: email support@gofuelfriendly.com to submit your request.
• Authorized agents: may submit access or deletion requests on your behalf in certain jurisdictions by emailing us, subject to proof of authorization and your direct confirmation.

d. Opt out of the sale and sharing of information (Behavioral Advertising) — not available in all states

In certain states, you have the right to opt out of the sale and sharing of your information for Behavioral Advertising (targeted advertising), which may occur, for example, when we share information with social media publishers to serve personalized ads on third-party sites and measure their engagement.

Depending on your location, you can use preference signals — such as Global Privacy Control (GPC) — to exercise this opt-out automatically. Upon detecting a valid signal, we treat it as an opt-out request for the associated browser and any linked consumer profile. Note that you must enable the signal separately on each browser or browser profile you use. Even after opting out, you may still see Fuel Friendly ads, but they will be less personalized.

e. Appeals

If we do not take action on your rights request and you are in an eligible jurisdiction, you may appeal our decision by emailing us with the subject line "Rights Request Appeal."

f. Do Not Track

"Do Not Track" (DNT) is a developing browser standard signaling that you do not want your online activity tracked across third-party sites over time. We currently do not interpret or respond to DNT or similar browser signals. Learn more at allaboutdnt.com.

12. Changes to this Privacy Policy

We may occasionally update this Privacy Policy to reflect changes in our practices or in applicable law. The "Last updated" date at the top of this page indicates when it was last revised. For material changes, we will provide additional notice, such as a notice posted on the Services or a message sent to the email address on file for you.

We encourage you to review this Privacy Policy periodically to stay informed about our information handling and privacy practices.