Privacy Notice

Last Updated: 1/13/2026

Introduction

Energy Transfer LP, and its subsidiaries and affiliates, including Sunoco LP (collectively, the “Company”), recognize and respect your privacy. We provide this Privacy Notice (“Notice”) to inform you of the Company’s collection, protection, usage, and disclosure of information that identifies, relates to, describes, is reasonably capable of being associated with or is or could reasonably be linked to, directly or indirectly, an identified or identifiable natural person, household or device (“Personal Information”).

This Notice describes the types of Personal Information we may collect from you or that you may provide when you visit our websites, our social media sites or our mobile apps (collectively, our “Sites“), or when you use email, text, and other electronic messages to communicate over or with us, or when you register to purchase our products, use our services, visit our gas stations, or attend our events.

Please read this Notice carefully to understand our policies and practices regarding your Personal Information and how we will treat it. If you do not agree with our policies and practices, your choice is to not use our Sites or other services. By accessing or using our Sites or services, you acknowledge that you have read this Notice. This Notice may change from time to time (see “Changes to Our Privacy Notice” below). Your continued use of our Sites or services after we make and notify you of changes in a manner appropriate to the changes is deemed to be acceptance of those changes, so please check the Notice periodically for updates.

Table of Contents

Personal Information We Collect

Sources of Personal Information

How We Use Your Personal Information

Disclosure of Your Personal Information

Choices About How We Use and Disclose Your Personal Information

U.S. State-Specific Privacy Rights

European and Other Non-U.S. Data Subject Specific Information

Links to Other Sites

Children Under the Age of 18

Data Security

Changes to Our Privacy Notice

Contact Information

Personal Information We Collect

We may collect the following categories of Personal Information depending on how you interact with us, our Sites you use, your jurisdiction, and as permitted or required by applicable law:

• Contact information, such as name, postal address, e-mail address, telephone number, date of birth, passwords, or other information provided at the time of registering to use our Sites, to apply for our offerings, such as rewards programs or other promotions, or positions, including employee or contractor positions, or to attend one of our programs.
• Business information, including your job title, work email address and phone number, professional or employment information, professional licenses or certifications, and your employer’s name, address, and contact information.
• Social media or third party account information, if you choose to link, connect, or login to our Sites through a third party online service.  When you do so, you direct the service to send us certain information about you controlled by that service, such as profile information. This sharing is subject to the applicable privacy notices and your privacy settings of that service.
• Rewards information, such as available and earned rewards points, rewards loyalty numbers, including grocery rewards loyalty numbers, information on rewards transactions, including the items, such as number of gallons, redeemed using rewards points, and the time and location rewards points were redeemed.
• Location information, such as precise geolocation as derived from your IP address and GPS information from your device.
• Site usage information, such as information about the equipment you use to access our Sites and internet connection, including your computer, device identifiers, IP address, operating system, and browser type; the resources you access and use on our Sites; usage details such as browsing actions and patterns, including session replay data, and the time of the visit and the visited page(s); information regarding your search queries on our Sites; traffic on our Sites; metadata and other details; and other user actions.  Our vendors and partners may also collect Personal Information this way on our Sites. For example, we may also use cookies and other tracking technologies for these purposes.
• Communications with us, such as information that you provide by completing forms on our Sites, including information you submit related to incidents, posting material, requesting customer support, products or services, attending in-person events or locations, or corresponding with us, including via chats or emails. We may collect audio recordings or images, and we may ask you for information when you report a problem with our Sites.
• Uploads, such as information you provide to be published, displayed, or posted on public areas of our Sites, or to be transmitted to other users of our Sites or third parties (collectively, “User Contributions“). Your User Contributions are posted and transmitted to others at your own risk. Although you may set certain privacy settings for such information, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of our Sites with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
• Financial Information, such as your payment card details, billing address, and financial account information, such as your account and routing numbers, and any other financial information you provide as part of an application or transaction payment.
• Commercial Information, including products and services, and the amounts of each, including the number of gallons, that you purchase, view, add to cart, or return online and in stores, transaction details, such as payment method, fuel grade purchased, price, time and duration of pump visit, and dispenser or pump number and gas station location, your participation in reward programs, and other information regarding your purchase history or past transactions.
• Video Surveillance, we may use video surveillance, and may collect video and audio, including your image and voice, at our gas stations to detect and address security and safety incidents, shoplifting, other potentially illegal activities, and adequate staffing considerations.
• Other Personal Information, we may receive additional Personal Information as required or permitted by law.

Sources of Personal Information

We may collect Personal Information from the following sources:

• Directly from you, including when you create an account, use or upload Personal Information on our Sites, visit our Sites, visit our gas stations, communicate with us, or otherwise provide us with your Personal Information.
• Automatically as you navigate through our Sites, including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies, including with the help of third parties.
• From our corporate affiliates, partners and third parties, including our advertising business partners.
• From our service providers and partners, including when we engage them to enable certain technology and when they collect or process your Personal Information on our behalf.

How We Use Your Personal Information

We use Personal Information for the following purposes, and for other purposes, with your consent, or as permitted by applicable law:

• To provide and personalize our services, including to present and administer our gas stations and Sites and their related contents to you, to recognize you when you return to our Sites, and to store information about your preferences, allowing us to customize our Sites according to your individual interests.
• To authenticate accounts and orders, including to determine if we can provide you with information, products, or services you request from us, and to do so if possible.
• For legal reasons, including to (i) comply with any applicable court order, law, regulation or legal process, including response to any government or regulatory request; (ii) participate in adversarial legal proceedings, including litigation and civil discovery, (iii) investigate potential violations of and enforce our policies and agreements, including this Notice and our terms of use, including for billing and collection; (iv) protect the security or integrity of our services; (v) detect, prevent, or investigate potential fraud or abuse, (vi) meet our corporate and social responsibility commitments; or (vii) to protect the rights, property, health, welfare, security or safety of you, the Company, our clients, or others.
• To communicate with you, including to provide you with information about our services, publications, and products, or to notify you about changes to our Sites, gas stations, or any products or services we offer or provide. We also use your Personal Information to respond to you if you contact us.
• To improve our services, including to improve our gas stations and Sites, calculate usage levels, diagnose server problems, and speed up your searches.
• To evaluate applications you provide, including to evaluate your candidacy for a position with us.
• To run our loyalty programs, including to determine your loyalty points available for use in a transaction, to reimburse providers for your use of loyalty points, and to facilitate transactions.
• For marketing and advertising, including to estimate our audience size and usage patterns. We use Google Analytics and other analytics and advertising partners to (i) measure and report how users interact with our Sites for the purposes of understanding and optimizing web usage, which may include the use of session replay data; (ii) conduct business and market research; (iii) measure conversion tracking; (iv) advertise; and (v) manage, measure and optimize the effectiveness of our content and advertising campaigns. We may also use Personal Information to send you promotional materials and to invite you to our events.

Disclosure of Your Personal Information

We may disclose Personal Information to the following, and for the following purposes, and for other purposes, with your consent, or as permitted by applicable law:

• To Service Providers: We use service providers to support our business and who are bound by contractual obligations to keep Personal Information confidential and use it only for the purposes for which we disclose it to them.
• To Business Partners: We may disclose Personal Information to our business partners to assist them in providing services to you.
• To Advertising/Analytics Partners: Google Analytics, other third-party advertising and analytics partners, and other partners may receive information about your activities on our sites through third-party cookies and other trackers placed through our sites. As disclosed above, this may be for providing analytics about the use of our services, including how you use and interact with our sites through session replay data, and to provide marketing and advertising, and analytics regarding that marketing and advertising.  To opt out of our use of third-party cookies and trackers that share data with such partners, visit our cookie management tool.
• To Corporate Affiliates: We disclose Personal Information to our corporate affiliates, which process Personal Information, including on our behalf, and including for purposes of improving marketing and providing advertisements.
• For Legal Reasons: We may disclose Personal Information if we believe that disclosure is reasonably necessary to (i) comply with any applicable court order, law, regulation or legal process, including response to any government or regulatory request; (ii) participate in adversarial legal proceedings, including litigation and civil discovery, (iii) investigate potential violations of and enforce our policies and agreements, including this Notice and our terms of use, including for billing and collection; (iv) protect the security or integrity of our services; (v) detect, prevent, or investigate potential fraud or abuse, (vi) meet our corporate and social responsibility commitments; or (vii) to protect the rights, property, health, welfare, security or safety of you, the Company, our clients, or others.
• For Change of Control Reasons: We may disclose Personal Information to potential or actual acquirers, their representatives, or other relevant participants, in connection with, including during negotiations of, any sale, merger, acquisition or change of control involving all or a portion of the Company’s business or assets, including in connection with bankruptcy or other similar proceedings.

Data Retention

We will retain your Personal Information for as long as necessary to fulfill the purposes outlined in this Notice, unless a longer retention period is required or permitted by law.

The criteria used to determine our retention periods include the following:

• Our relationship with you;
• Your choices with respect to your Personal Information;
• Whether we have a legal obligation to keep the data (for example, in certain instances records of transaction data must be kept for a certain period of time before we can delete them);
• The permissibility of retention; or
• Whether retention is advisable in light of our legal position (such as in regard to the enforcement of our agreements; the resolution of disputes; and applicable statutes of limitations, litigation or regulatory investigation).

Choices About How We Use and Disclose Your Information

Depending on your jurisdiction, and subject to exceptions and limitations provided by local law, you or your authorized agent may have additional rights in relation to your Personal Information.  See the “U.S. State-Specific Privacy Rights” and “European and Other Non-U.S. Data Subject Specific Information” sections below.

Marketing Communications

If you do not wish to have your contact information used by the Company to promote our own or third-party products or services, you can opt out in the communication sent to you or by sending us an email stating your request to privacyoffice.mailbox@energytransfer.com. Not all of our communications are for marketing, and you’ll continue to receive messages related to your products and services, such as bills, transactional notices, or customer service.

User Contributions

If you delete your User Contributions from our Sites, copies of your User Contributions may remain viewable in cached and archived pages or might have been copied or stored by other users of our Sites. Our Terms and Conditions govern the access and use of information provided on our Sites, including User Contributions.

U.S. State-Specific Privacy Rights

Residents of certain states may have certain additional rights in relation to their Personal Information, subject to certain exceptions. For example, you may have the following rights, subject to exceptions and other applicable law:

• Right to transparency. Right to receive notice regarding (i) the categories of Personal Information to be collected; (ii) the purposes for which the categories of Personal Information are collected or used; (iii) whether such Personal Information is “sold” or “shared”; (iv) the length of time we intend to retain each category of Personal Information, or if that is not possible, the criteria used to determine that period and (v) other relevant information. This Notice contains such information; please read this Notice, as well as any additional terms provided to you at or before the collection of your Personal Information, in their entirety.
• Right to access. Right to access (i) the categories and specific pieces of Personal Information we have collected about you; (ii) the categories of sources from which we have collected such Personal Information; (iii) our business purpose for collecting such Personal Information and (iv) the categories of third parties to whom we have disclosed such Personal Information.
• Right to data portability. Right to obtain a copy of the Personal Information you provided to us in a portable and, to the extent technically feasible, readily usable format.
• Right to correct. Right to correct any inaccurate or incomplete Personal Information about you that we process.
• Right to delete. Right to delete any Personal Information about you that we process, subject to certain circumstances.
• Right to limit. Right to limit the use and disclosure of sensitive Personal Information. We do not use or disclose any sensitive Personal Information in any way that would require us to provide this right.
• Right to opt out of “profiling”. Right to opt out of “profiling” in furtherance of a “decision that produces a legal or similarly significant effect concerning a consumer” (as such terms are defined by applicable laws). Because we do not profile in furtherance of such decisions, we do not provide this right.
• Right to opt out of “sales” and “sharing” and processing for targeted advertising purposes. Right to opt out of (i) the “sale” or “sharing” of your Personal Information for cross-context behavioral advertising; and (ii) the processing of your Personal Information for purposes of “targeted advertising” (as such terms are defined by applicable laws). The Company shares certain information with third parties through third-party cookies and trackers placed on our sites for statistical analytics and advertising purposes, including to deliver targeted and cross-context behavioral advertisements to you. You may opt out of the use of cookies and trackers on our sites for such purposes—and therefore, any “sale” or “sharing” of your Personal Information or processing of your Personal Information for purposes of targeted advertising—by clicking Manage Cookies. Residents of certain states may use the Global Privacy Control (“GPC”) to opt out of the “sale” or “sharing” of their Personal Information or the processing of their Personal Information for purposes of targeted advertising. Please visit https://globalprivacycontrol.org/ for information on how to download and use GPC. Your settings for cookies and trackers may need to be resubmitted if you use different browsers or devices to access our sites. Please note, however, that our website does not respond to “do not track” signals. We do not have actual knowledge that we “sell” or “share” the Personal Information of consumers under the age of 16.

The Company does not discriminate against you on the basis of exercising any of these rights.

To request access to your Personal Information or correct or delete your Personal Information, you can (1) email your request to privacyoffice.mailbox@energytransfer.com, or (2) call the following toll-free phone number: 1-800-228-5687. Please specify in your request what Personal Information you would like to access, correct or delete.

We will acknowledge receipt of your request within 10 business days. Within 45 calendar days, we will either provide a substantive response or notify you of an extension period (up to an additional 45 calendar days) and reason for the extension.

Only you or an authorized agent (as described below) may make a verifiable consumer request related to your Personal Information. You may designate an authorized agent to submit your verified consumer request on your behalf, only if the authorized agent has your written permission, including power of attorney, to do so and you have taken steps to verify your identity directly with us.

To respond to your request, we must verify your identity or the authority of your authorized agent. We will only use the Personal Information provided in that context to verify your identity or the authority of your authorized agent to make the request. Making a verifiable consumer request does not require you to create an account with us. To allow us to verify your request, we will require that you (1) log into your account, (2) provide at least two pieces of Personal Information, including your email address and phone number, we already have in our possession, or (3) give a declaration as to your identity under penalty of perjury. We will verify your consumer request by comparing the information you provide to information already in our possession and take additional steps to minimize the risk of fraud.

• If we deny your request, residents of certain states have the right to appeal our decision. You may do so by replying directly to our denial or emailing your appeal to privacyoffice.mailbox@energytransfer.com.

We do not control third-party collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way. You can opt-out of receiving targeted ads from members of the Network Advertising Initiative (“NAI”) on the NAI’s website.

Notice of Financial Incentive

Under certain state regulations, we are required to provide certain disclosures regarding “financial incentives” offered in exchange for your disclosure of personal information to us. We provide several opportunities or programs where individuals can provide personal information to us in exchange for financial incentives, including in connection with participation in rewards programs. These programs are entirely voluntary and allow us to grow, enhance, and improve our services and business activities and provide benefits to those who participate. For the various financial incentives that we offer, we have not assigned a monetary value to the data we collect through or in connection with our financial incentive programs; however, based upon our good faith reasonable estimate, the value we receive from your personal information is reasonably equal to the value of the financial incentive we provide to individuals who participate in these programs. The material terms for the financial incentives are available with the applicable offer that you may receive prior to you voluntarily deciding to participate. If you want to opt-out of participating in an incentive program, please either stop participating or email us at privacyoffice.mailbox@energytransfer.com and include your first and last names, email address, identify the incentive program(s) that you want to opt-out from, and in the subject line, please include “Incentive Program Opt-Out”.

European and Other Non-U.S. Data Subject Specific Information

If you are located outside of the United States, and in particular, in the European Economic Area (“EEA”), Switzerland, the United Kingdom (“UK”), Brazil or Canada, you may have various rights in relation to the processing of your Personal Information, subject to exceptions and limitations provided by local law, including:

• Right of access – The right to confirm whether we process Personal Information about you and to access such Personal Information.
• Right to rectification – The right to correct any inaccurate or incomplete Personal Information.
• Right to erasure (‘right to be forgotten’) – The right in certain circumstances to delete Personal Information about you that we process.
• Right to restriction of processing – The right in certain circumstances to request that we restrict processing your Personal Information.
• Right to data portability – The right to receive your Personal Information in a structured, commonly used and machine-readable format.
• Right to object – The right in certain circumstances to request that we stop processing your Personal Information.
• Automated Decision Making – The right not to be subject to a decision based solely on automated processing, including profiling.

Submitting a Data Subject Request
Data subject requests should be made to privacyoffice.mailbox@energytransfer.com. Please note that we may request additional information from you to confirm your identity and ensure that you are entitled to access the relevant Personal Information.

You also have the right to lodge a complaint with the competent data protection authority (in the country where you habitually reside, where you work or where an alleged infringement occurred) if you think that the processing of your Personal Information carried out by us infringes privacy laws applicable to you.

Legal Bases on Which We Use Your Personal Information

We rely on the following legal bases when we process Personal Information about individuals in jurisdictions where such legal bases are required, including the EEA, Switzerland, the UK, Brazil and Canada.

• Contractual Necessity: When we enter into a contract directly with you, we process your Personal Information on the basis of the contract to provide you with products and services and to prepare, enter into, perform, and manage the contract. We may not be able to provide you with all our products and services if we do not process your Personal Information for these purposes.
• Consent: We rely on your prior consent, where required, to (i) send you marketing communications related to our products and services and (ii) store cookies on your device for statistical and advertising purposes. In this regard, please note that you have the right to withdraw your consent at any time (without calling into question the processing previously carried out) by sending a request at the contact details specified at the end of this Notice.
• Legal Obligations: We also process your Personal Information to comply with the legal obligations of your country to which we are subject, namely laws, regulations, codes of practice, guidelines or rules applicable to us, and to respond to requests from, and otherwise communicate with, competent public, governmental, judicial or other regulatory authorities of your country.
• Legitimate interests, unless overridden by your interests or fundamental rights and freedoms: In addition, we process Personal Information based on our legitimate interests, which consist of (i) administering and improving the performance of our Sites; (ii) improving our products and services; (iii) ensuring the authentication and security of accounts, including detecting and investigating violations of our terms and policies; (iv) complying with other countries’ laws and responding to requests from, and otherwise communicating with, competent public, governmental, judicial or other regulatory authorities; (v) meeting our corporate and social responsibility commitments and (vi) protecting our and our customers’ rights, property or security. You have the right to be informed about how we have assessed that it is in our legitimate interest to collect your Personal Information for these purposes by sending a request at the contact details specified at the end of this Notice.

International Data Transfers
The Company may transfer Personal Information to the United States for the purposes referred to in this Notice and to other Company affiliates located worldwide in accordance with applicable law. If you are a resident of a country within the European Union or are otherwise accessing our Sites from outside the United States of America, by using our Sites or obtaining our products or services or  and providing your Personal Information, you hereby explicitly acknowledge and agree to (i) the transfer of such information to the United States and (ii) the collection, use and disclosure of your Personal Information in accordance with this Notice. If you do not agree with this transfer, collection, use, or disclosure, please do not use our Sites.

For the purpose of providing our services, we rely on certain affiliates and service providers also located in the United States, and this may mean your Personal Information may be transferred to the United States.

When your Personal Information is transferred from your country (outside the United States), including the EEA, Switzerland, or the UK or Brazil to another recipient located in a country whose legislation has not been recognized by the applicable authority (e.g., the European Commission, the Federal Data Protection and Information Commissioner, the Information Commissioner’s Office, the Brazilian Data Protection Authority) as having an adequate level of protection (such as the United States), we ensure that the transfer is governed by the applicable standard contractual clauses. If you would like further information in this respect, please contact us at the contact details specified at the end of this Notice.

Per the GDPR, you have the right to lodge a complaint with the Data Protection Authority (DPA).

The Data Protection Commission (DPC) in Ireland can be contacted by

email: info@dataprotection.ie or call (01) 765 01 00 or 1800 437 437.

The Dutch Data Protection Authority (DPA) can be contacted by

email: FG@autoriteitpersoonsgegevens.nl or call (+31) (0)70 8888 660.

Links to Other Sites

The Sites may contain links to other websites, including some sites administered by the Company or administered by other companies on behalf of the Company, as well as to third-party sites. This Notice applies only to sites administered by and on behalf of the Company, and not to any third-party sites. We have not reviewed and are not responsible for the content or privacy practices of such third-party sites. We encourage you to read the privacy policies applicable to such third-party sites.

Children Under the Age of 18

If you are under 18, do not use or provide any information on our Sites or to us. Our Sites are not intended for children under 18 years of age. We do not knowingly collect Personal Information from children under 18. If we learn we have collected or received Personal Information from a child under 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 18, please contact us at privacyoffice.mailbox@energytransfer.com.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure. The safety and security of your information also depend on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Sites, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the Internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Sites. Any transmission of personal information is at your own risk. We are not responsible for circumventing any privacy settings or security measures on the Sites.

Changes to Our Privacy Notice

We may update or make changes to this Notice and post such changes here with a revised “Last Updated” date at the top of this page. If we make material changes to how we treat your Personal Information or changes that otherwise require your consent, we will notify you through a manner appropriate to the changes. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Sites and this Notice to check for any changes.

Contact Information

To ask questions, register a complaint, or comment about this Notice and our privacy practices, contact us at privacyoffice.mailbox@energytransfer.com.

Postal Address:

Sunoco LP, Attn: General Counsel
8111 Westchester Drive
Dallas, TX 75225

Energy Transfer LP, Attn: General Counsel
8111 Westchester Drive
Dallas, TX 75225