1. Information about our organisation and mobile application
a. BP Oil UK Limited (00446915) (“BP”) is responsible for the BPme mobile application (the “BPme App”). BP is registered in England, having its registered office at: Chertsey Road, Sunbury-on-Thames, Middlesex TW16 7BP.
b. The BPme App may contain links to third party sites/mobile applications which are not subject to this privacy statement. Please read the privacy statements of any such third party sites/mobile applications that you visit via the BPme App.
c. This privacy statement is designed to cover your registration and use of both your BP Account and the BPme App.
2. Collection and use of your personal data
a. Collection of your personal data
BP takes your privacy seriously and will always comply with the law when using your personal data.
i. BP Account Data
In order to use BP apps you must first set up a separate BP account which you can use to register for, and manage, your chosen apps or other BP services. We collect the personal data you provide directly to us when you create your BP user account (i.e. name and email address). When you sign up for new BP apps you will be asked to enter your BP account username and password. Your chosen apps will then be linked with your BP account.
ii. BPme App Data.
When you use the services provided on the BPme App we collect the following information about you:
i. Email address
We will use the email address provided as part of your BP account registration to send you service-related emails (including confirmation that you have successfully registered for a BP Account and email receipts of your BPme purchases). Depending on the preference you have selected in your BPme App preference settings, we may send you BP marketing communications (see section 2 (b)vi below).
ii. Location information:
a. When you register for the BPme App you are sent a prompt by your mobile phone’s operating system asking whether you would like to consent to the BPme App using your location data in order for us to provide you with the Pay for Fuel and Station Finder services. This enables the BPme App to collect information about your geographic location and exact positioning without which we cannot provide these particular services to you. We will only collect data about your location while you are using the BPme App or when the App is running in the foreground or background.
b. When you register for BPme you are also given the option to receive store-specific offers which are based on your phone’s location.
iii. Transaction information:
We collect transaction details related to your use of the BPme App, including the type and value of service requested, and the date and time.
iv. Usage and preference information:
a. We collect generic information about the way customers use the BPme App to improve app functionality and user experience. However this information is aggregated with that of other users of the BPme App and cannot be used to identify you personally..
b. You may also be able to save certain settings in the BPme App manually. This allows us to improve your experience while using the BPme App (for example by setting your preferred language and preferred Pay for Fuel payment method as default).
v. Device information:
a. In order to enable us to provide you with the format and functionality you require and for security and fraud prevention purposes, we will collect information about your mobile device, including, for example, the IP address of your device, the hardware model, operating system and version, software and file names, who your mobile network operator is and other mobile network information.
b. Most mobile platforms (such as iOS and Android) have defined certain types of device data such as location data that apps cannot access without your consent. The operating system used by your mobile device will require your consent before it allows the BPme App to access these types of device data.
b. Use of your personal data
We may use your personal data for the following purposes:
i. to create a BP user account to allow you to access BPme and other services that may be offered by BP.
ii. to verify your identity for use of the BPme App (this includes, where you are a corporate BP Fuelcard holder, allowing the ultimate account holder of your BP Fuelcard to authorise your use of the Pay for Fuel BPme service) and to conduct address verification or credit checks for invoicing and billing purposes.
iii. to facilitate the payment for products and services purchased by you through the BPme App.
iv. to locate nearby BP petrol stations using Station Finder. You can disable location services using the settings in your phone’s operating system but this may prevent or limit your use of the Pay for Fuel and Station Finder services.
v. to assist in identifying offers available to you and providing these tailored offers to you when you visit the offers tab.
If you consent to us using your phone’s location, we can tailor these in-app offers so that they are specific to the BP store you visit while using the BPme App. If you want to withdraw your consent to store-specific offers, please visit the settings page in the BPme App (Account > Settings > Communication Preferences). This will mean that generic offers will still appear when you visit the offers tab, but some of these offers may not be redeemable at the store you are visiting.
vi. to send you tailored email marketing communications and mobile push notifications about BP products and services which we think will be of interest to you. You can opt out of receiving these direct marketing communications at any time by following the instructions set out in each marketing communication or by changing your preferences within the BPme App by visiting the ‘Settings’ section of the App (Account>Settings>Communications Preferences).
vii. to analyse your shopping behaviour (based on your purchases at BP petrol stations and your use of the BPme App), in order to enable us to send you tailored BP offers and marketing communications which we think will be of interest to you. We will also use this data to carry out research into how customers are interacting with BP so that we can improve our products, services, and customer communications.
3. Legal basis for processing your personal data
a. For most uses of your personal data described above, BP relies on the fact that it has a legitimate business interest in collecting and using your personal data for purposes such as facilitating your payments through the BPme App, sending you offers and carrying out customer research and data analytics.
b. In some situations, for example when using your location data, we rely on your consent as the basis for collecting and using such data. You can withdraw your consent at any time by either changing your privacy preferences within the BPme App, by contacting BPmeUK@bp.com or by calling 0800 402402.
4. Other sources of personal data
a. We may also collect personal information from other sources and combine that information with personal information we collect through the BPme App, for example, if you choose to link, create, or log in to your BPme App with a payment provider (e.g. PayPal ).
b. If you are an existing Nectar customer and wish to link your Nectar account to the BPme App, you will be required to provide us with your Nectar card number and Nectar account password. Your Nectar password is used for verification purposes only and not stored by the BPme App. We will obtain additional data from Nectar in order to provide you with the best Nectar offers which we believe will be of interest to you based on an analysis of your shopping history with BP and other companies participating in the Nectar scheme.
5. Disclosure and transfer of personal data to third countries
We may disclose your personal information to the following third parties:
i. as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, request from a regulator or any other legal process served on BP.
ii. with Nectar if you choose to link your BPme App account profile with your existing Nectar profile. This will allow you to collect points while using the BPme App and also gain access to exclusive Nectar offers.
iii. if BP is subject to a takeover, divestment or acquisition we may disclose your personal information to the new (or prospective) owner of the business.
iv. in relation to the Pay for Fuel BPme service, to the ultimate account holder of your BP Fuelcard. However, we will only disclose your name, email address, mobile number and BP Fuelcard number to the ultimate account holder. We will not disclose your password or passcode.
v. since BP operates globally, BP may require your personal information to be transferred to other countries inside or outside the European Economic Area (EEA). Where we transfer personal information to other wholly-owned BP entities we have Binding Corporate Rules in place, which have been approved by various national regulators, in order to ensure an adequate level of protection wherever these BP entities are based.
vii. third-party service providers acting on our behalf may only use your data in accordance with our written instructions and must comply with the technical and organizational protections we have put in place. Any transfer of personal data to third-parties based outside the EEA is governed by a standardised set of data protection clauses (as required by the European Commission). A copy of these clauses is available on request.
6. Retention period
a. We will retain your personal information only for as long as is necessary in order to fulfil the purpose(s) for which it was collected, and for any other linked purpose.
b. To permanently delete your:
- BPme App; and/or
- BP user account
please contact BPmeUK@bp.com or call 0800 402402. If you delete your BP user account please note that all of the apps linked to your account will also be deleted. Upon receipt of such a request we will delete or irreversibly anonymise you data within 28 days.
c. BP user accounts or BPme subscriptions which have not been used for 24 months will be automatically deleted or irreversibly anonymised.
d. We are legally obliged to retain commercial transaction data for a period of 7 years. Personal identifiers will then be removed in order to de-identify the data. We may also continue to use the aggregated form of the data (i.e. where the data of numerous individuals is combined to prevent identification of a single person) for statistical purposes.
e. We may retain your personal information insofar as it may be necessary to defend or prosecute any legal claim(s).
7. Your Rights, Questions and Complaints
a. With regard to your personal data which BP has collected and processed, you are entitled to:
i. access and review a copy of your personal data;
ii. have incomplete or inaccurate personal data which relate to your corrected;
iii. ask for deletion of your personal data, where it is being processed unlawfully;
iv. object (i.e. ask BP to stop processing your personal data to profile you or send you direct marketing materials); and
v. any additional rights afforded by the applicable law in force at the time.
Please note: your exercise of the above-listed rights may be subject to certain exemptions.
b. If you want access to your personal information or exercise any of your other privacy rights, contact BPmeUK@bp.com.
c. If you wish to make a complaint or query about BP’s use of your data, we encourage you to use BP’s EU-approved complaint resolution mechanism under our BCRs using the contact address set out above. As an EU citizen, you also have the right to lodge a complaint with your national data protection supervisory authority.
8. How to change your privacy preferences
You can change your privacy preferences at any time by selecting Account >Settings >Communication Preferences within the BPme App. Please note: your privacy preferences may affect the BPme App functionality.
9. Keeping personal information accurate
a. We are committed to ensuring that your personal information is kept accurate and up to date. It is your responsibility to let us know if there are inaccuracies or changes to your personal information.
b. Please notify us at BPmeUK@bp.com if there are any changes to or inaccuracies in your personal information, providing us with sufficient information to enable us to identify you, so that any changes can be made.
BP does not knowingly collect information from children. This BPme App is intended for motorists of driving age only and should not be used by persons under the age of 17, nor any person without a valid UK driving license. If you are not legally allowed to drive, please do not use the BPme App and/or provide BP with your personal information.
12. Changes to this privacy statement
We review this privacy statement regularly and may modify it from time to time. We will place any updates on the BPme App. This privacy statement was last updated on 14 December 2017.