Supply, trading & shipping

Introduction

This Privacy Notice explains how the bp group (or any of its brands) may process your personal data when you interact with bp supply, trading & shipping (e.g. as part of the vendor onboarding process or as a trading entity).

To find out more about other ways we may process personal data visit our Privacy Centre.

Who we are

The bp group has different businesses that engage directly with third parties.

In some countries, we’re required to list the legal entity responsible for processing your personal data, you can find this information here.

What data do we collect about you?

When you interact with us, we may collect and process the following information:

• Your name, contact details and identification information.
• Professional data such as your job title, company name, company email address, business phone number and business address.
• Correspondence with you, related to specific interactions we might have had with you including the vendor onboarding process.
• Recordings such as audio and electronic communications, based on our legitimate business purposes including for legal or regulatory obligations, where applicable.

Where do we collect your data from?

• You - when you interact with us, such as during the vendor onboarding process or when you engaged with us in relation to our trading activities with bp.
• Other sources – like third parties or independent searches as part of customer due diligence.

Why we collect your data and how we use it?

We process personal data for the purposes described above on the basis that:

• The processing is necessary to comply with legal obligations to which we are subject such as complying with and to assess compliance with applicable laws, rules and regulations and to conduct due diligence checks (such as anti-money laundering). Please read our counterparty due diligence privacy notice for further information about the customer due diligence (CDD) process.
• The processing is necessary for our legitimate interest to manage our interaction with you, corresponding with you, the management and administration of our business, compliance with our internal policies and procedures and to comply with our obligations and exercise our legal rights.

On which basis do we collect your data?

We process personal data for the purposes described above on the basis that:

• The processing is necessary for our legitimate interests in managing our relationship with you.

• The processing is necessary to comply with legal obligations to which we are subject.

Where your data may be processed

As an international company, we may transfer your personal data to other bp-group companies around the world. For instance, our entities in the UK, USA, India, or Hungary among other countries, may access information for IT support purposes.

We rely on our intragroup agreement to share information with other bp companies like the EU Commission-approved standard contractual clauses and the UK-approved transfer agreement.

How do we protect your data?

How long do we keep your data for?

The length of time we keep your personal data for varies depending on why we’re using it and our internal policies.

As a general rule, we keep your personal data only for as long as necessary for the purposes described in this notice, including managing our interaction with you and for legal obligations. Retention periods are determined in line with our internal retention policies and applicable laws.

Where personal data is no longer required, it will be securely deleted or anonymised. In some cases, we may be required to retain personal data for longer periods to comply with legal requirements.

Your rights as an individual

Subject to applicable law, you may have rights in relation to your personal data, including the right to request access to, correction or deletion of your personal data, or to object to certain processing activities.

If you have any complaints, please contact us first and we will take all steps we can to resolve it. You also have the right to complain to the competent supervisory authority. You can find the contacts for your local supervisory authority here.

To exercise any of your rights listed above, please contact us.

Changes to this Notice

The last update to this notice was in October 2026.