Privacy Policy

1. What we collect

• Your name, email and (optionally) phone number when you buy a FuelPass
• The recipient's name and Tongan phone number — required to deliver the FuelPass
• FuelPass records: purchase, delivery and redemption status
• Basic usage analytics (aggregated)

2. How we use it

To process your payment, deliver and verify FuelPasses, send receipts and confirmations, prevent fraud, and provide support. We never sell personal information.

3. Who we share it with

• Stripe — processes your card payment. Card details never touch our servers.
• SMS/email providers — deliver FuelPass codes and confirmations.
• Palu Fuel station staff — verify redemptions (they see the FuelPass code at the counter, not your card details).

4. Security

FuelPass codes are stored hashed, so they cannot be read from our database. All traffic is encrypted (HTTPS). Payments are handled under Stripe's PCI DSS certification.

5. Retention & your rights

Purchase and redemption records are kept as long as needed for accounting and fraud prevention. You may request a copy or deletion of your personal data via the Contact page.

6. Contact

FuelPasses@palufuel.to

Draft for review — final wording to be confirmed with Palu Fuel before launch.