Last updated: 2026-07-31

This Privacy Policy explains how eFlexFuel and the relevant StepOne Tech entity collect, use, share, store, and protect personal data when you use our websites, online store, mobile applications, customer support channels, and related services.

This document is structured into:

Part A – Global Privacy Terms

Part B – EU / EEA / Switzerland / France Supplement

Part C – United States Supplement

If a regional supplement applies to you, it will override the global section to the extent required by applicable law.

Who We Are

Depending on the service, website, and your location, your personal data may be processed by one of the following entities:

Global / EU operations

StepOne Tech Ltd. / StepOne Tech Oy
Myllyhaantie 6 D1
33960 Pirkkala
Finland

United States operations

StepOne Tech America Inc.
235 West 48th Street Apt 42B
New York, NY 10036
United States

How to contact our customer service?

If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us at:

• United States: support.eflexfuel.com/hc/en-us
• France: support.eflexfuel.com/hc/fr-fr
• Finland: support.eflexfuel.com/hc/fi
• Rest: support.eflexfuel.com/hc/en-gb

Part A – Global Privacy Terms

1. Scope of This Policy

This Privacy Policy applies to:

• eFlexFuel websites and online stores;
• eFlexApp and related digital services where applicable;
• product ordering, support, warranty, and customer relationship management;
• newsletters, surveys, campaigns, contests, and marketing communications;
• contact forms, chat, email, telephone, and other support interactions.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy.

2. Personal Data We Collect

We may collect personal data directly from you, automatically through your use of our services, and from certain third parties.

2.1. Information you provide directly

This may include:

• name;
• email address;
• phone number;
• postal address;
• language and communication preferences;
• account or registration details;
• customer service messages, feedback, complaints, and claims;
• purchase, order, payment, delivery, invoicing, and returns information;
• newsletter subscriptions and marketing preferences;
• campaign or competition participation details;
• social media account details where you choose to share them;
• photographs or files you send us;
• vehicle-related information such as make, model, year, mileage, registration number, and compatibility details;
• information about your use of eFlexFuel products.

2.2. Information collected automatically

When you browse our websites, use our app, or interact with our services, we may collect:

• IP address;
• browser type and version;
• device type, operating system, and hardware information;
• app identifiers and device identifiers;
• language settings and system configuration;
• referring and exit URLs;
• page views, clicks, search actions, and navigation paths;
• timestamps and session duration;
• approximate or precise location data, depending on device settings and permissions;
• analytics, log, diagnostic, performance, and error data;
• cookie and similar tracking data.

2.3. Customer support, chat, and call data

When you contact us, we may process:

• your email, message, form submission, or support request;
• the content of your communication;
• chat metadata such as timestamps, selected topic, browser information, pages visited, and IP-based city information;
• call-related information and, where permitted by law, call recordings for service quality, training, complaint handling, verification, and service improvement.

2.4. Information from third parties

We may receive information from:

• transport and logistics providers;
• payment and finance providers;
• public records;
• IT, analytics, and advertising partners;
• business partners supporting order fulfillment, service delivery, or customer support.

3. Why We Use Personal Data

We may use personal data to:

• create and manage customer accounts;
• process requests, quotations, orders, deliveries, payments, refunds, and returns;
• provide products, digital services, support, and app functionality;
• communicate with you about orders, services, support matters, policy changes, and technical issues;
• respond to questions, complaints, claims, and feedback;
• run campaigns, surveys, competitions, and prize draws;
• improve our products, services, websites, app functionality, customer support, and user experience;
• generate analytics, reporting, and statistics;
• personalize content, recommendations, and marketing;
• send newsletters and promotional communications in line with your preferences and applicable law;
• detect, prevent, and investigate fraud, misuse, or security risks;
• enforce our terms and protect our rights;
• comply with legal, accounting, tax, warranty, and regulatory obligations;
• support a merger, acquisition, financing, or other business transfer if applicable.

4. Profiling and Personalization

We may combine information collected across our services to:

• improve customer experience;
• personalize website or app content;
• create audience segments;
• tailor marketing and advertising;

understand which products and services may interest users.

Where required by law, we will rely on your consent for cookies, certain location processing, and certain electronic direct marketing activities.

We do not use profiling alone to make decisions that have legal or similarly significant effects on you unless expressly permitted by law and properly disclosed.

5. When We Share Personal Data

We do not sell your personal data in the ordinary meaning of a direct sale for money.

We may share personal data:

• with your consent;
• with affiliates under common ownership or control;
• with service providers and processors supporting hosting, IT, analytics, payment handling, logistics, communications, customer service, accounting, security, and marketing;

when needed to perform a contract with you;

• when required by law, court order, subpoena, or official request;
• to investigate fraud, misuse, safety risks, or legal violations;
• in connection with a merger, acquisition, financing, or sale of all or part of our assets or business.

We require relevant processors and partners to handle personal data in accordance with applicable legal and contractual requirements.

6. Cookies and Similar Technologies

We use cookies and similar technologies such as analytics tools, pixels, and web beacons to:

• operate and secure our websites and services;
• remember your settings and preferences;
• support shopping cart and account functionality;
• understand traffic and usage;
• improve website and app performance;
• personalize content and advertising where permitted.

You can manage cookies through your browser or device settings. Please note that disabling certain cookies may affect site functionality.

7. International Transfers

Because we operate internationally and use external service providers, your personal data may be transferred to, stored in, or accessed from countries other than your own.

Where required by law, we use appropriate safeguards for international transfers, such as contractual protections and other lawful transfer mechanisms.

8. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention periods may vary depending on the nature of the data, your relationship with us, the service used, and applicable legal obligations.

Where possible, we may anonymize, aggregate, pseudonymize, or securely delete data when identifiable retention is no longer necessary.

9. How We Protect Personal Data

We use reasonable technical, organizational, and physical safeguards designed to protect personal data against unauthorized access, loss, misuse, alteration, or disclosure.

Access to personal data is limited to personnel and partners who need the information for legitimate business or legal purposes.

However, no internet transmission or storage system can be guaranteed to be 100% secure.

10. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

The latest version should always be available on the relevant eFlexFuel website. Continued use of our services after an update means the updated Privacy Policy may apply, subject to applicable law.

Part B – EU / EEA / Switzerland

11. When This Supplement Applies

This section applies where your personal data is processed in the context of our European operations or where EU / EEA, Swiss, or similar privacy laws apply.

12. Legal Bases for Processing

Where European privacy laws apply, we process personal data on one or more of the following legal bases:

Contract – where processing is necessary to take steps at your request or to perform a contract with you;

Legitimate interests – such as operating our business, improving products and services, providing customer support, preventing misuse, and conducting permitted marketing;

Consent – for example for certain cookies, newsletters, location processing, and some electronic marketing;

Legal obligation – where we must retain, use, or disclose data to comply with law;

Vital interests – where processing is necessary to prevent serious harm.

13. Your Privacy Rights in Europe

Subject to applicable law and identity verification, you may have the right to:

• access your personal data;
• correct or complete inaccurate data;
• delete personal data;
• restrict processing;
• object to processing;
• object to direct marketing and profiling for direct marketing;
• withdraw consent at any time where processing is based on consent;
• receive certain data in a structured, commonly used, machine-readable format and transfer it to another controller;
• lodge a complaint with your local supervisory authority.

If you are located in France, you may lodge a complaint with the CNIL. If you are located elsewhere in the EU / EEA, you may contact your local supervisory authority.

14. Direct Marketing in Europe

If you subscribe to our newsletter, provide consent, or if direct marketing is otherwise permitted because of an existing customer relationship and applicable law, we may send you electronic direct marketing.

You can opt out at any time by:

• using the unsubscribe link in the message; or
• contacting us at (check “How to contact or customer service?”).

We may keep a record of your opt-out so we can respect your preferences.

15. Profiling in Europe

We may use personal data to:

• personalize our services;
• create customer segments;
• tailor content and recommendations;
• target marketing more effectively;
• analyze website and app usage.

We do not rely on profiling alone for automated decisions producing legal or similarly significant effects, unless separately disclosed and permitted by law.

16. Transfers Outside the EU / EEA

If personal data is transferred outside the EU / EEA, we will use safeguards required by applicable law, such as:

• the European Commission’s standard contractual clauses; or
• other lawful transfer mechanisms available under applicable privacy law.

17. EU-Specific Retention Notes

Examples of retention rules used in our European notices include the following:

• customer service emails, chat messages, and form submissions may be retained for approximately one year, unless a longer retention period is required;
• campaign or competition data may be retained for approximately one year after the campaign ends if no other relationship exists;
• purchase and online store data may be retained for approximately 12 months or longer where consumer, accounting, warranty, or other legal obligations apply;
• newsletter data may be retained as long as the subscription remains active, and suppression data may be retained afterward to respect your opt-out;
• inactive accounts may be reviewed after approximately 24 months of inactivity.

These examples may vary depending on the exact service, legal obligations, and relationship with you.

18. Use of Artificial Intelligence

18.1. How We Use AI

We may use AI technologies to:

• Assist with customer support inquiries and chatbot interactions.
• Help draft customer service responses.
• Provide product recommendations or compatibility assessments.
• Generate, translate, summarize, or improve website and support content.
• Analyze website usage, trends, and customer feedback.

18.2. Data Processed by AI Systems

AI systems may process information you provide to us, including:

• Contact details.
• Customer support messages.
• Product and vehicle information submitted through forms.
• Website interaction data.

We do not use AI to make solely automated decisions that produce legal or similarly significant effects on customers.

18.3. Transparency

Where required, we will inform you when you are interacting directly with an AI system or receiving AI-generated content. AI-generated responses are provided to assist users but may occasionally contain inaccuracies or incomplete information. Customers should independently verify any important technical, legal, financial, or purchasing decisions.

18.4. Human Oversight

AI-generated outputs may be reviewed, validated, modified, or supplemented by our employees. Final decisions relating to customer service, orders, warranties, returns, and technical support remain subject to human oversight.

18.5. Third-Party AI Service Providers

We may use trusted third-party AI service providers to support our services. Where personal data is processed by such providers, appropriate contractual and data protection safeguards are implemented in accordance with applicable data protection laws.

18.6. Your Rights

Your rights regarding your personal data remain unchanged and include the rights of access, rectification, erasure, restriction, objection, and data portability, as provided under applicable privacy laws.

If you have questions regarding our use of AI or the processing of your personal data, please contact us using the contact details provided in this Privacy Policy.

This update has been introduced to support transparency requirements under the EU AI Act and to provide customers with clear information about how AI technologies are used within our services.

Part C – United States Supplement

19. When This Supplement Applies

This section applies to:

• the U.S. website(s) and U.S.-based digital services;
• S. residents interacting with our services;
• personal data processed by StepOne Tech America Inc., where applicable.

20. Categories of Personal Data Processed in the U.S.

For U.S. users, we may process the categories of data described in Part A, including:

• identifiers and contact details;
• account and transaction information;
• internet and network activity;
• device and diagnostic information;
• geolocation information;
• marketing preference data;
• customer support data;
• vehicle-related information;
• other information you provide voluntarily.

21. U.S.-Specific Sharing Disclosure

We may share personal data with affiliates and service providers for:

• order fulfillment;
• customer support;
• payment handling;
• logistics and shipping;
• security and fraud prevention;
• analytics and reporting;
• IT and hosting;
• lawful marketing and communications.

We do not share or sell mobile phone contact information to third parties for marketing purposes unless you have explicitly opted in to such sharing.

22. California Rights

If you are a California resident:

22.1. Shine the Light

You may request information about categories of personal information, if any, disclosed to third parties for their direct marketing purposes during the preceding calendar year, together with the names and addresses of those third parties, as permitted by California law.

22.2. Minors’ Content Removal

If you are under 18, reside in California, and maintain a registered account, you may request removal of content you posted publicly on the service, subject to legal and technical limitations.

22.3. General Requests

Where applicable law provides such rights, you may also request access to, correction of, or deletion of personal data by contacting us.

23. Do Not Track

Some browsers offer a “Do Not Track” (“DNT”) setting. Because there is currently no universally accepted standard for recognizing and implementing DNT signals, we do not currently respond to DNT browser signals.

24. U.S. Contact Information

For U.S.-related privacy matters, you may contact:

StepOne Tech America Inc.
235 West 48th Street Apt 42B
New York, NY 10036
United States

Part D – Contact and Rights Requests

25. How to Contact Us

For all privacy-related questions or requests, please contact us through the customer service channels mentioned above.

Global / EU postal contact

StepOne Tech Ltd. / StepOne Tech Oy
Myllyhaantie 6 D1
33960 Pirkkala
Finland

U.S. postal contact

StepOne Tech America Inc.
235 West 48th Street Apt 42B
New York, NY 10036
United States

26. How to Exercise Your Rights

Depending on the law that applies to you, you may request to:

• access;
• review;
• update;
• correct;
• restrict;
• object to;
• port; or
• delete your personal data.

Submit your request using the contact details provided above. We may ask you to verify your identity before processing your request.

27. Language and Interpretation

This is an English-language consolidated privacy policy intended to unify multiple regional notices into one document. If local law requires additional disclosures, those local disclosures will apply in addition to this policy.