Effective Date: This Notice was last updated January 18, 2023.
Pilot Travel Centers LLC and its owned and operated subsidiaries and affiliates ("PTC" or "us", "we", "our") has developed this Privacy Policy to explain how we may collect, retain, use, process, share and transfer your personal data when you entrust us with it, whether that's during interactions with our websites or mobile apps, the use of any of our services, or when you visit any of our locations. This Privacy Statement is designed to help you obtain information about our privacy practices and to help you understand your privacy choices.
We are committed to keeping privacy design and principles at the core of our business. Our commitment applies to everyone who has a relationship with us - including our team members, guests, customers, partners, and website visitors. We are committed to providing you with the best overall experience in all of our products and services. We strive to deliver the right balance of protecting your privacy and leveraging your data and preferences to enhance your experience. For the avoidance of doubt, this Privacy Notice applies to all your interactions as a consumer (guest or customer) with PTC, both on and off-line, whether you access our webpage, use our mobile application, interact with our Electronic Platform, participate in the Loyalty Program, or visit our travel centers, service centers, or other locations.
For purposes of this Privacy Notice, "Personal Information" or "PI" is any information that identifies, relates to, describes, or is capable of being associated with, or could be reasonably linked to a consumer or household. "Sensitive personal data" has various definitions across state laws but essentially it is personal data of which the sensitivity level has been assessed and classified, indicating potentially more severe impact on an individual when confidentiality of such data is breached. From time to time, PTC will review and update this Privacy Notice to reflect changes in our business practices and/or Personal Information collection practices. We reserve the right to amend this Privacy Notice at any time, for any reason by posting the updated Privacy Notice, along with the revision date, on the Electronic Platform. It is strongly recommended that you periodically check this page to ensure you are viewing the most current version of the Privacy Notice. Your continued interactions with us constitute a continuing acceptance of this Privacy Notice as it may be revised from time to time. Any changes become effective when posted
BY SUBMITTING PERSONAL INFORMATION TO PTC, VIA ANY SUBMISSION CHANNEL, YOU ACKNOWLEDGE AND AGREE THAT YOU ARE 16 YEARS OF AGE OR OLDER AND YOU ACCEPT AND CONSENT TO THE PRACTICES AND USES DESCRIBED IN THIS PRIVACY NOTICE.
TO ENROLL IN OUR LOYALTY PROGRAM YOU MUST BE AT LEAST 18 YEARS OF AGE.
THE PROVISIONS OF THIS PRIVACY NOTICE DO NOT ESTABLISH CONTRACTUAL RIGHTS OR OBLIGATIONS, IN WHOLE OR IN PART, BETWEEN PILOT TRAVEL CENTERS LLC, ITS PARENT COMPANY, AND ANY OF ITS OWNED AND/OR OPERATED SUBSIDIARIES OR AFFILIATES AND YOU.
You may request an accessible version of this Privacy Notice by contacting us via the methods identified in the "Contact Us" section of this Privacy Notice.
The table below details the categories of Personal Information we collect, as well as the business purposes for collecting it and the types of third parties with whom we share it.
1. Personal Information such as name, date of birth, address, phone number, email address, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
2. Sensitive Personal Information such as social security number, state identification number, account log-in, financial account, debit/credit card number security code, password/credentials, geolocation, race/ethnicity
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
3. Financial Information such as direct billing, credit card/debit card number, bank routing and account numbers, credit history, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
4. Social Media Information such as social media handles, aliases, usernames, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
5. Unique Device Identifiers such as: electronic device model, browser type, MAC address, IP address, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
1. Health Information such as insurance policy information, health conditions, medical records, death certificates, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
2. Sensory Information such as voice recordings for guest service inquiries and video/ photographic images that may be captured in public areas for security reasons, or otherwise;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
3. Demographic Information such as age, marital status, military/veteran status, language preferences, gender, ethnicity, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
Transaction Information such as transactions completed at PTC locations and travel centers including, but not limited to: fuel purchases, Western Union money transfers, retail purchases, reserved parking purchases, shower reservations, repair services, replacement parts, gift card balances, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
1. Digital Information such as browsing history and geolocation information;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
2. Cookies and Similar Technologies Data as described in the "Cookies" section of this Notice.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
3. Location Data collected while using our platforms or services, or shared with us by third parties.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
1. Inferences such as preferences, characteristics, behaviors, etc.;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
2. Sensitive data inferences (Colorado);
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
1. Content and information you voluntarily share;
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
2. General information collected from other sources
Business Purpose for Personal Information collected and/or disclosed to Third Party Service Providers | Third Parties to Whom We Sell/Share Personal Information |
|
|
PTC utilizes various technical and non-technical sources to collect your PI. Collection of your PI may occur in the following situations, without limitation:
In addition to collecting PI directly from you, we may also collect your PI from these categories of sources:
PTC may collect and use your PI to fulfill the following specific business and commercial purposes including, but not limited to:
PTC may share the data in the categories of PI listed above with third parties1 to perform, for instance, services to support our business operations, provide services to our guests, and comply with any applicable laws or regulations. We request that Third-Party Service Providers2 implement commercially reasonable and appropriate safeguards and protections to prevent the unauthorized access, disclosure, and modification of your PI.
PTC reserves the right to share any and all PI:
1Mobile information will not be shared with third parties without your consent.
2Third-Party Service Providers means a sole proprietorship, partnership, limited liability company, corporation, association, or other legal entity that processes information on behalf of a business and to which the business discloses a consumer's personal information for a business purpose pursuant to a written contract, provided that the contract prohibits the entity receiving the information from retaining, using, or disclosing the personal information for any purpose other than for the specific purpose of performing the services specified in the contract for the business.
We retain information for different periods of time depending on the purposes for which we collect and use it, as described in this Privacy Notice. We will delete or de-identify information when it is no longer needed to fulfill these purposes unless a longer retention period is required to comply with applicable laws. There may be technical or other operational reasons where we are unable to fully delete or de-identify your information. Where this is the case, we will continue to store it securely according to our internal data policies and take reasonable measures to prevent further processing your information. We are required by privacy laws to maintain records of individual rights requests and how we responded to such requests for at least 24 months. We only use information obtained from any individual rights requests for recordkeeping purposes.
It is the goal of PTC to protect your privacy and safeguard your PI during all business and consumer transactions and interactions.
To protect the PI collected or transmitted, PTC has physical, technical, and procedural safeguards in place. These safeguards are based on industry best practices and standards, and the requirements of applicable legislation.
Please note, however, that while PTC attempts to safeguard your PI, no method of transmitting or storing electronic information is ever completely secure, and thus we make no warranty, express, implied, or otherwise, that your information will never be accessed, used, or released in a manner that is inconsistent with this Privacy Notice. IN NO EVENT SHALL WE BE LIABLE FOR ANY DAMAGES (WHETHER CONSEQUENTIAL, DIRECT, INCIDENTAL, INDIRECT, PUNITIVE, SPECIAL, OR OTHERWISE) ARISING OUT OF, OR IN ANY WAY CONNECTED WITH, A THIRD PARTY'S UNAUTHORIZED ACCESS TO YOUR INFORMATION, REGARDLESS OF WHETHER SUCH DAMAGES ARE BASED ON CONTRACT, STRICT LIABILITY, TORT, OR OTHER THEORIES OF LIABILITY, AND ALSO REGARDLESS OF WHETHER WE ARE GIVEN ACTUAL OR CONSTRUCTIVE NOTICE THAT DAMAGES WERE POSSIBLE, EXCEPT AS PROVIDED UNDER APPLICABLE LAWS.
We also use reasonable security measures when verifying a consumer privacy request and/or transmitting PI to a consumer in response to a consumer privacy request.
If a data breach compromises your PI, we will notify you and any applicable regulator when we are required to do so by applicable law.
PTC does not willingly collect or sell the PI of consumers less than 16 years of age. If we confirm that Personal Information has been collected from a consumer under the age of 16, we will delete these records in accordance with applicable laws. If you believe that PTC has collected information of a consumer less than 16 years of age, please contact our Privacy Office at privacy.pilotflyingj.com.
This Privacy Policy is applicable only to the website on which it is posted, and it does not apply to any third-party websites.
The website may contain links to, and media and other content from, third-party websites. These links are to external websites and third parties with which we may have no relationship. Because of the dynamic media capabilities of our website, it may not be clear to you which links are to our website and which are to external, third-party websites. If you click on an embedded third-party link, you will be redirected away from our website to the external third-party website. You can check the URL to confirm that you have left this website.
We cannot and do not (1) guarantee the adequacy of the privacy and security practices employed by or the content and media provided by any third parties or their websites, (2) control third parties' independent collection or use or your PI, or (3) endorse any third-party information, products, services or websites that may be reached through embedded links on this website.
Any PI provided by you or automatically collected from you by a third party will be governed by that party's privacy policy and terms of use. If you are unsure whether a website is controlled, affiliated, or managed by us, you should review the Privacy Policy and practices applicable to each linked website.
PTC provides many special offers and discounts to loyalty members throughout the year. By providing your contact information and enrolling in our loyalty program, you join the many consumers who enjoy discounts and savings. Consumers enrolling in the loyalty program initially provide the following category of PI: Personally Identifiable Information. The more engaged individuals are with the loyalty program, the more discounts and savings they will receive. For more information about signing up for our Loyalty Program, you may visit a PTC location, our website, or download our mobile application. Consumers have the right to withdraw from the financial incentive by deactivating their Loyalty account. To deactivate your Loyalty account, contact Guest Services at 1-877-866-7378. Certain consumers have the right to delete their Loyalty account. For more information, please visit our Privacy Portal at privacy.pilotflyingj.com. or contact our Privacy Office at privacy@pilotflyingj.com.
Emerging tools and technology, such as Universal Opt Out Mechanisms (UOOM), provide users the ability to establish their tracking preferences and seamlessly communicate those preferences to any website they visit. As part of our commitment to protect and respect your privacy, we are working to consistently incorporate these tools into our digital assets. Currently, you can set your tracking preferences through the use of the cookie banner displayed when you visit our site, or by clicking the "Ad Choices" link at the bottom of our site.
If you no longer wish to receive communications from us via email, you may opt-out by clicking the "unsubscribe" link available at the bottom of our email communications.
A cookie is a small file created by a web server that can be stored on your device (if you allow) for use either during a particular browsing session (a "session cookie") or a future session (a "persistent cookie"). Many browsers are designed to accept cookies by default, however, you can modify your browser settings either to notify you when you have received a cookie or to refuse to accept cookies. Please note that certain areas of our websites and applications may not function properly if you set your browser not to accept cookies. For more control of the cookies used when visiting our sites, click the "Ad Choices" link at the bottom of the page at www.pilotflyingj.com.
PTC values our customers and appreciates the opportunity to serve you. In addition to wanting you to understand how we secure and process your data, we also want you to understand your rights regarding the PI that you have shared with us. There are numerous state laws that combine to specify the following rights:
If a request is submitted in a manner that is not one of the designated methods for submission, or if the request is deficient in some manner unrelated to our verification process, we will provide you with specific directions on how to submit the request or remedy any deficiencies with the request, as applicable.
If requests from a consumer are manifestly unfounded or excessive, in particular because of their repetitive character, we may either (1) charge a reasonable fee, or (2) refuse to act on the request and notify the consumer of the reason for refusing the request. If we charge a fee, the amount will be based upon the administrative costs of providing the information or communication or taking the action requested.
PTC will not discriminate against consumers for exercising any of the rights described herein. This includes denying goods or services, charging different prices, or providing a different level or quality of service. However, PTC can offer consumer's different rates (or service) if that difference is reasonably related to the value of the consumer's data.
You have the right to request that PTC disclose the PI we collected about you. Upon the receipt of a verified request and in accordance with our data retention policy, we will provide the following:
Please note that there may be instances where access to your PI may be restricted by law. If we are unable to verify your identity, we may request additional information for the express purpose of validating your identity. If we are prohibited from fulfilling your request for the disclosure of all or some of your PI, we will advise you of the specific reasons for restricting access, barring any legal or regulatory limitations.
We will not provide specific pieces of PI if the disclosure creates a substantial, articulable, and unreasonable risk to (1) the security of that PI, (2) the consumer's account with us, or (3) the security of our systems or networks. We will not disclose Social Security numbers, drivers license numbers, other government-issued identification numbers, financial account numbers, health insurance numbers, medical identification numbers, account passwords, and security questions and answers.
PTC provides three options to submit Access Requests. Individuals may submit their Access Request by:
To verify the identity of the individual who has made an Access request, PTC may require individuals to submit additional information. PTC may ask individuals to provide: first name, last name, date of birth, address, phone number, and email address. After providing the information necessary to complete the request, you will be verified with a third-party identity verification service. Once this request has been verified, the Privacy Office will begin to process your request.
If you determine that any of the information we have about you is incorrect, you are able to update that information in multiple ways:
We partner with other companies and businesses to deliver interest-based ads to you, which enable us to provide our Services and relevant offers to you.
In working with other companies and businesses, we may disclose personal information in a way that meets the criteria of "selling" or "sharing" personal information as defined under state privacy laws.
You can request to opt-out of this "sale or sharing" of your personal information by clicking on the "Do Not Sell or Share My Personal Information" link here or elsewhere on our platform, where you will find instructions on opting out of the use of your personal information for interest-based advertising.
PTC provides multiple options for individuals to submit a Do Not Sell or Share Request:
Upon receiving a request to opt-out, we will act upon it as soon as feasibly possible and in accordance with any applicable law. We will notify all third parties to whom we have sold your PI, as required by law. We will notify you when this has been completed.
If we have a good-faith, reasonable, and documented belief that a request to opt-out is fraudulent, we may deny the request. In this scenario, we will inform the requesting party that we will not comply with the request and provide an explanation of why we believe the request is fraudulent.
If you have previously opted-out of the sale or sharing of your PI and would like to opt-in, you can do the following:
We use a two-step opt-in process through which you must first clearly request to opt-in, and then second separately confirm your choice to opt-in.
You may designate an Authorized Agent to make requests on your behalf. Under the California Consumer Privacy Act, an Authorized Agent is defined as "a natural person or a business entity registered with the Secretary of State that a consumer has authorized to act on their behalf." We may deny a request from an Authorized Agent that does not submit proof that they have been authorized by the consumer to act on their behalf.
If acting as an Authorized Agent on behalf of a consumer, please contact our Privacy Office at privacy@pilotflyingj.com.
Under the California Consumer Privacy Act, PTC is required to respond to no more than two access requests in a rolling 12 month period.
As a resident of California, in addition to the individual rights mentioned in this Privacy Notice, you also have the right to request the deletion of your Personal Information.
You have the right to request that PTC delete any of your PI that we collected from you and retained, subject to certain exceptions. We respect your right to request the deletion of your PI and would like to inform you of what happens if we are able to honor your request. If you choose to delete your PI, this will result in us deleting your PI from the associated loyalty account. As a result of the deletion of your PI, you will:
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
To verify the identity of the individual who has made a Deletion request, PTC may require individuals to submit additional information. PTC may ask individuals to provide: first name, last name, date of birth, address, phone number, and email address. After providing the information necessary to complete the request, you will be verified with a third-party identity verification service. Once this request has been verified, the Privacy Office will begin to process your request.
If we deny your request, we will (1) inform you that we will not comply with the request and describe the basis for the denial, including any applicable statutory and regulatory exceptions; (2) delete the PI that is not subject to the exception; and (3) not use the PI retained for any other purpose than provided for by the applicable exception(s).
You may designate an Authorized Agent to make requests on your behalf. Under the California Consumer Privacy Act, an Authorized Agent is defined as "a natural person or a business entity registered with the Secretary of State that a consumer has authorized to act on their behalf." We may deny a request from an Authorized Agent that does not submit proof that they have been authorized by the consumer to act on their behalf.
If acting as an Authorized Agent on behalf of a consumer, please contact our Privacy Office at privacy@pilotflyingj.com.
You may ask us to confirm whether we process your personal information, and if so, that we disclose to you the specific data elements that we do process.
As a resident of Virginia, in addition to the individual rights mentioned in this Privacy Notice, you also have the right to request the deletion of your Personal Information.
You have the right to request that PTC delete any of your PI that we collected from you and retained, subject to certain exceptions. We respect your right to request the deletion of your PI and would like to inform you of what happens if we are able to honor your request. If you choose to delete your PI, this will result in us deleting your PI from the associated loyalty account. As a result of the deletion of your PI, you will:
We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:
PTC provides three options to submit Deletion Requests. Individuals may submit their Deletion Request by:
To verify the identity of the individual who has made a Deletion request, PTC may require individuals to submit additional information. PTC may ask individuals to provide: first name, last name, date of birth, address, phone number, and email address. After providing the information necessary to complete the request, you will be verified with a third-party identity verification service. Once this request has been verified, the Privacy Office will begin to process your request.
If we deny your request, we will (1) inform you that we will not comply with the request and describe the basis for the denial, including any applicable statutory and regulatory exceptions; (2) delete the PI that is not subject to the exception; and (3) not use the PI retained for any other purpose than provided for by the applicable exception(s).
As a resident of Canada, in addition to the Access and Do Not Sell or Share My Personal Information rights mentioned in this Privacy Notice, you also have the right to request the amendment of your PI, if you believe it is inaccurate, and the right to withdraw consent for the collection, use, and disclosure of your PI.
You have the right to request that PTC amend any of your PI that you believe to be inaccurate, incomplete, or not up-to-date.
PTC will take reasonable steps to correct the information so that it is accurate, complete, and up-to-date. This may include transmitting the amended information to third parties who have access to the information in question.
PTC provides two options to submit Amendment Requests. Individuals may submit their Amendment Request by:
You have the right to withdraw consent, at any time, for the collection, use, or disclosure of Personal Information. We respect your right to withdraw consent and would like to inform you of what happens if we are able to honor your request. If you choose to withdraw consent, this will result in deleting information from associated accounts, including loyalty accounts. As a result, you will:
Individuals may submit their Request by:
To verify the identity of the individual who has made a Withdrawal of Consent request, PTC may require individuals to submit additional information. PTC may ask individuals to provide: first name, last name, date of birth, address, phone number, and email address. After providing the information necessary to complete the request, you will be verified with a third-party identity verification service. Once this request has been verified, the Privacy Office will begin to process your request.
If you have questions or concerns about our Privacy Policy and privacy practices, please contact our Head of Privacy at privacy@pilotflyingj.com, via telephone at 1-877-866-7378, or at the address provided below:
Pilot Flying J
Attention: Head of Privacy
5508 Lonas Dr.
Knoxville, TN 37909