Privacy Policy

Last Updated: June 19, 2024

This Privacy Policy governs the manner in which BW Gas & Convenience Holdings, LLC and its affiliates and subsidiaries, including without limitation Allsup’s and Yesway convenience stores (collectively, “we,” “us,” “our”) collect, use, maintain, and disclose information collected from users (each, a “User”) of our websites and mobile applications (collectively, the “Sites”). This Privacy Policy applies to our Site and all products and services offered by us.

Personal information we collect from you

We collect personal identification information from Users in a variety of ways, including, but not limited to, when Users visit our Sites, fill out a form, and interact with other activities, services, features, or resources we make available on our Sites.  Users may be asked for:

• Contact details, such as name, email address, address, and telephone number, and date of birth

Users may refuse to supply personally identifiable information to us, but it may prevent them from engaging in certain Sites-related activities.

Personal information we collect passively

We also passively collect personal information from Users when they interact with our Sites, such as browser name, type of computer, technical information about Users’ means of connection to our Sites, such as the operating system and the Internet service providers utilized, IP address, and other similar information. We may also collect geolocation data, such as real-time information about the location of your device (GPS and network-based), to enable the locations and directions features on our Sites.
Further, our Sites use “cookies” and similar tracking technologies to enhance Users’ experiences and to collect information about your use of our Sites. Depending on your browser, you may be able to set your browser to restrict cookies and other tracking technologies. However, if you do so, note that some parts of the Sites may not function properly.

How we use personal information

We collect and use Users’ personal information for the following purposes:

• To personalize user experience
  We may use information in the aggregate to understand how our Users, as a group, use the services and resources provided on our Sites.
• To improve our Sites
  We continually strive to improve our Sites’ offerings based on the information and feedback we receive from you.
• To improve customer service
  Your information helps us to more effectively respond to your customer service requests and support needs.
• To respond to your inquiries
  If you contact us with questions or concerns, we will use your information to respond to your inquiries, and/or other requests or questions.
• To analyze Site usage and market our products and services
  We use cookies and similar tracking technologies to analyze use of our Sites, to advertise to our customers, and to provide rewards to our customers based on their purchases.
• To send marketing communications

If you decide to opt-in to our mailing list, you will receive emails that may include company news, updates, related product or service information, etc. Similarly, if you opt in to receive marketing text messages from us or push notifications on any mobile applications we may provide, we will contact you via such method(s) for promotional purposes. If you would like to opt out of receiving such communications, you can do so by:

• For emails: Clicking “Unsubscribe” at the bottom of our emails
• For texts : Texting STOP to 855-697-1213
• For push notifications: Turning off push notifications from our app(s) via settings on your device

You can also contact us via the contact information provided at the bottom of this policy to express your preferences regarding marketing communications.

How we protect your personal information

We adopt appropriate data collection, storage and processing practices, and security measures to protect against unauthorized access, alteration, disclosure, or destruction of your personal information. However, please be aware that we cannot completely guarantee the security of your personal information. If we become aware that your personal information has been compromised, we will take appropriate actions to resolve the incident in accordance with applicable laws and regulations.

Disclosing your personal information

We disclose the categories of Users’ personal information that we collect, as listed above, in the following situations:

• To vendors who process your personal information on our behalf
• To third parties for marketing and analytics purposes, including companies that provide cookies and similar tracking technologies, and to other third parties to provide rewards to our customers based on their purchases
• To a successor entity or a purchaser upon a merger, consolidation, or other corporate reorganization in which we participate, or a sale of all or a portion of our assets
• To government or judicial authorities to comply with a subpoena, court order, governmental inquiry, legal processes, legal obligations, or to protect the rights, property, or safety of other users or the public
• To protect our rights, defend or pursue a legal claim, or investigate or prosecute illegal activities
• To third parties with your consent or at your direction

We also share generic aggregated demographic information not linked to any personal information about Users with our business partners, trusted affiliates, and advertisers for the purposes outlined above.

Third party websites

Users may find advertising or other content on our Sites that link to the sites and services of our partners, suppliers, advertisers, sponsors, licensors and other third parties. We do not control the content or links that appear on these sites and are not responsible for the practices employed by websites linked to or from our Site. In addition, these sites or services, including their content and links, may be constantly changing. These sites and services may have their own privacy policies and customer service policies. Browsing and interacting on any other website, including websites which have a link to our Sites, is subject to that website’s own terms and policies.

Children’s privacy

Our Sites are not intended for persons we know to be under age 13 and are not designed to attract anyone under age 13. If you are the parent or guardian of a minor and believe that we have collected personal information about your child in error, please contact us immediately at the contact information provided below so we can make reasonable efforts to remove all personal information related to the minor.

Changes to this privacy policy

We may update this Privacy Policy at any time. When we do, we will revise the updated date at the bottom of this page. We encourage Users to frequently check this page for any changes to stay informed about how we use, disclose, and protect the personal information we collect.

Your acceptance of these terms

By using these Sites, you signify your acceptance of this policy. If you do not agree to this Privacy Policy, please do not use our Sites. Your continued use of the Sites following the posting of changes to this Privacy Policy will be deemed your acceptance of those changes.

Contacting us

If you have any questions about this Privacy Policy, the practices of the Sites, or your dealings with the Sites, please contact us at:
BW Gas & Convenience Holdings, LLC
2301 Eagle Parkway, Suite 100
Fort Worth, TX
682-428-2400
rewards@yesway.com

U.S. STATE SUPPLEMENTAL PRIVACY POLICY

This U.S. State Supplemental Policy (the “Supplemental Policy”) provides additional information for residents of states with comprehensive privacy legislation that apply to us, including California, Iowa, and Texas (collectively, “U.S. Privacy Laws”).

Some portions of this Supplemental Policy only apply to consumers who reside in particular U.S. states. In those instances, we have indicated that such language applies only to those residents.

1. Definitions
   • “Personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household. Personal information includes “personal data” (or equivalent terms) as that term is defined by U.S. Privacy Laws.
   • “Vendor” means a service provider, contractor, or processor as those terms are defined by U.S. Privacy Laws.
   • “Third Party” means any entity that is not us or a vendor.

   Other terms used herein that are defined terms under U.S. Privacy Laws shall have the meanings afforded to them by the U.S. Privacy Laws, whether or not capitalized, unless the context indicates otherwise. As there are some variations between such definitions across the U.S. Privacy Laws, the definitions applicable to you are those provided in the statute for the U.S. state in which you are a consumer. For example, if you are a California consumer, terms used in this Supplemental Policy that are defined terms in the California Consumer Privacy Act (“CCPA”) shall have the meanings afforded to them in the CCPA as this Supplemental Policy applies to you.

2. Overview of Personal Information Processing
   1. Collection of Personal Information. We collect and we have collected in the past twelve months the following categories of personal information:
      • Contact details, such as name, email address, address, and telephone number
      • IP addresses, browser name, type of computer, technical information about Users’ means of connection to our Sites, such as the operating system and the Internet service providers utilized, and other similar information
      • Geolocation data, such as device location

      We do not collect sensitive personal information, as defined by the CCPA, or use sensitive personal information for purposes not permitted by the CCPA.

   2. Sources of Personal Information. We collect these categories of personal information directly from consumers, from our vendors and third parties when they disclose personal information to us, including third parties that provide cookies and similar tracking technologies on our Sites for marketing and analytics purposes, and from public databases and social media.
   3. Purposes for Collection, Processing, and Disclosure of Personal Information. We collect, process, and disclose the categories of personal information listed in Section B(1):
      • To personalize user experience
        We may use information in the aggregate to understand how our Users, as a group, use the services and resources provided on our Sites.
      • To improve our Sites
        We continually strive to improve our Sites’ offerings based on the information and feedback we receive from you.
      • To improve customer service
        Your information helps us to more effectively respond to your customer service requests and support needs.
      • To respond to your inquiries
        If you contact us with questions or concerns, we will use your information to respond to your inquiries, and/or other requests or questions.
      • To analyze Site usage and market our products and services
        We use cookies and similar tracking technologies to analyze use of our Sites, to advertise to our customers, and to provide rewards to our customers based on their purchases.
      • To send marketing communications
        If you decide to opt-in to our mailing list, you will receive emails that may include company news, updates, related product or service information, etc. Similarly, if you opt in to receive marketing text messages from us or push notifications on any mobile applications we may provide, we will contact you via such method(s) for promotional purposes. If you would like to opt out of receiving such communications, you can do so by:
        • For emails: Clicking “Unsubscribe” at the bottom of our emails
        • For texts : Texting STOP to 855-697-1213
        • For push notifications: Turning off push notifications from our app(s) via settings on your device

        You can also contact us via the contact information provided at the bottom of this policy to express your preferences regarding marketing communications.

        We may also aggregate and/or anonymize personal information and analyze those data for statistical or any other purposes permitted by law.

   4. Disclosure of Personal Information.
      Further, we disclose and have disclosed the categories of personal information listed in Section B(1) to the following categories of entities for a business purpose in the past twelve months:
      • To vendors who process your personal information on our behalf
      • To third parties with your consent or at your direction

      As needed, we may also disclose the categories of personal information listed in Section B(1) in the following situations:

      • To a successor entity or a purchaser upon a merger, consolidation, or other corporate reorganization in which we participate, or a sale of all or a portion of our assets
      • To government or judicial authorities to comply with a subpoena, court order, governmental inquiry, legal processes, legal obligations, or to protect the rights, property, or safety of other users or the public
      • To protect our rights, defend or pursue a legal claim, or investigate or prosecute illegal activities

      We also share generic aggregated demographic information not linked to any personal information about Users with our business partners, trusted affiliates, and advertisers for the purposes outlined in Section B(2), above.

   5. Sale, Sharing, & Processing for Purposes of Targeted Advertising.
      We sell, share, and process personal information for targeted advertising, and we have sold and shared the categories of personal information listed in Section B(1) in the past twelve months. We sell and share, and have sold and shared, personal information to third parties that provide cookies and similar tracking technologies on our Sites for marketing and analytics purposes and to other third parties to provide rewards to our customers based on their purchases. However, we do not have actual knowledge that we sell or share personal information of California consumers under 16 years of age. For purposes of the CCPA, a “sale” is the disclosure of personal information to a third party for monetary or other valuable consideration, and a “share” is the disclosure of personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.
   6. Retention of Personal Information. We will retain each category of personal information listed in Section B(1) for the time needed to fulfill our legitimate and lawful business purposes and comply with applicable laws and regulations.
3. Do Not Track & Opt-Out Preference Signals
   We recognize the opt-out preference signals that we are required to recognize for compliance with applicable law, but do not respond to other opt-out preference and “do not track” signals. Where required by U.S. Privacy Laws, we treat the opt-out preference signals we are required to comply with as a valid request to opt-out of sale, sharing, and processing for purposes of targeted advertising, as applicable, for the browser or device through which the signal is sent and any consumer profile we have associated with that browser or device, including pseudonymous profiles. Further, if we know the identity of the consumer from the opt-out preference signal, we will also treat the opt-out preference signal as a valid request to opt out of sale and sharing for such consumer. Consumers may use opt-out preference signals by downloading or otherwise activating them for use on supported browsers and setting them to send opt-out preference signals to websites they visit.
4. Your Rights & Choices
   Residents who reside in states with U.S. Privacy Laws have the following rights regarding our collection and use of the personal information, subject to certain exceptions. Please read this section carefully as some rights vary by state. When we process your request, we will do so in accordance with the U.S. Privacy Law applicable to you based on your state of residence.
   You may exercise the data subject rights below by contacting us at rewards@yesway.com, by calling 682-428-2400, or by clicking [here] and submitting details regarding your request. You may also authorize an agent to make data subject requests on your behalf. In such instances, authorized agents may use the same methods as you to submit the requests on your behalf. To verify your identity and protect your personal information, we may ask the requestor to provide information that will enable us to verify your identity in order to comply with your data subject request, such as asking your agent to provide proof of signed permission from you, or ask you to confirm with us directly that you provided the agent with permission to submit the request. In some instances, we may decline to honor your request if an exception applies under applicable law. We will respond to your request consistent with applicable law.
   • Right to Know: You have the right to know the following details about our privacy practice at or before the point of collection. We have provided such information in this Supplemental Policy. You may also request that we provide you with information about the following aspects of how we have handled your personal information specifically in the 12 months preceding your request:
     • The categories of personal information we have collected about you;
     • The categories of sources from which we collected such personal information;
     • The business or commercial purpose for collecting, selling, or sharing personal information about you;
     • The categories of personal information about you that we disclosed and the categories of third parties to whom we disclosed such personal information;
     • The categories of personal information about you that we sold, shared, or used for targeted advertising purposes, and the categories of third parties with whom we sold or shared such personal information; and
     • The length of time we intend to retain each category of personal information, or if that is not possible, the criteria used to determine that period.
   • Right to Deletion: You may request that we delete any personal information about you we that we collected from you.
   • Right to Correction: You may request that we correct any inaccurate personal information we maintain about you. Please note this right does not apply to Iowa residents.
   • Right to Access Specific Pieces of Personal Information and Data Portability: You may ask to obtain the specific pieces of personal information we have collected about you in a portable and, to the extent technically feasible, readily usable format that allows you to transmit the personal information to another entity without hindrance. You may not exercise this right more than two times in a calendar year.
   • Right to Opt Out of Sale, Sharing, and Targeted Advertising: You have the right to opt out of the sale, sharing, and processing of your personal information for targeted advertising purposes.

   Further, you have the right not to be discriminated against for exercising your data subject rights. We will not discriminate against you for exercising your data subject rights. For example, we will not deny services to you or provide a different level of quality of services to you as a result of you exercising your data subject rights.

   To appeal our decision on your data subject requests, you may contact us at rewards@yesway.com. Please enclose a copy of or otherwise specifically reference our decision on your data subject request, so that we may adequately address your appeal. We will respond to your appeal in accordance with applicable law.

5. Other Disclosures for California Consumers
   • California Residents Under Age 18. If you are a resident of California under the age of 18 and a registered user of our Sites, you may ask us to remove content or data that you have posted to the Sites by writing to rewards@yesway.com. Please note that your request does not ensure complete or comprehensive removal of the content or data, as, for example, some of your content or data may have been reposted by another user.
   • Disclosure About Direct Marketing for California Residents. California Civil Code § 1798.83 permits California residents to annually request certain information regarding our disclosure of personal information to other entities for their direct marketing purposes in the preceding calendar year. To make such a request, please send an email to rewards@yesway.com with the subject “Shine the Light Request.”
   • Financial Incentives for California Consumers. We do not provide financial incentives to California consumers who allow us to collect, retain, sell, or share their personal information. We will describe such programs to you if and when we offer them to you.
6. Disclosure for Nevada Consumers
   We sell “Covered Information” as defined under Nevada law, but we do not disclose “Personal Information” as defined under Nevada law for commercial purposes. Under Nevada law, you have the right to direct us to not sell your Covered Information to third parties, as defined under Nevada law. To exercise this right, if applicable, you may contact us at rewards@yesway.com.
7. Contact Us
   If you have any questions regarding this Supplemental Policy or our Sites generally, please contact us at:

   BW Gas & Convenience Holdings, LLC
   2301 Eagle Parkway, Suite 100
   Fort Worth, TX
   682-428-2400
   rewards@yesway.com

We may update this Supplemental Policy from time to time. When we do so, we will post the updated version of our Supplemental Policy here.

Last Updated: June 19, 2024