1. Information about our organisation and mobile application
a. BP Oil UK Limited (00446915) (“BP”) is responsible for the BPme mobile application (the “BPme App”). BP is registered in England, having its registered office at: Chertsey Road, Sunbury-on-Thames, Middlesex TW16 7BP.
b. The BPme App may contain links to third party sites/mobile applications which are not subject to this privacy statement. Please read the privacy statements of any such third party sites/mobile applications that you visit via the BPme App.
2. Collection and use of your personal data
a. Collection of your personal data
BP takes your privacy seriously and will always comply with the law when using your personal data.
i. BP Account Data
In order to use BP apps you must first set up a separate BP account which you can use to register for, and manage, your chosen apps or other BP services. We collect the personal data you provide directly to us when you create your BP user account (i.e. name and email address). When you sign up for new BP apps you will be asked to enter your BP account username and password. Your chosen apps will then be linked with your BP account.
ii. BPme App Data. When you use the services provided on the BPme app we collect the following information about you:
i. Email address
Depending on the preference you have selected in your BPme App preference settings, we may use the email address provided as part of your BP account registration to send you your preferred marketing communications.
ii. Location information:
a. When you register for the BPme App you are sent a prompt by your mobile phone’s operating system asking whether you would like to consent to the BPme App using your location data in order for us to provide you with the Pay for Fuel and Station Finder services. This enables the BPme app to collect information about your geographic location and exact positioning without which we cannot provide these particular services to you. We will only collect data about your location while you are using the BPme App or when the App is running in the foreground or background.
b. When you register for BPme you are asked if you would like to receive site-specific offers which are based on your phone’s location.
iii. Transaction information:
a. We collect transaction details related to your use of the BPme App, including the type and value of service requested, and the date and time.
iv. Usage and preference information:
a. We collect information about the way you use the BPme App, and any other information tied directly or indirectly to your device. You may also be able to save certain settings in the BPme App manually. This allows us to improve your experience while using the BPme App (for example by setting your preferred language and preferred Pay for Fuel payment method as default).
v. Device information:
a. In order to enable us to provide you with the format and functionality you require, we will collect information about your mobile device, including, for example, the IP address of your device, the hardware model, operating system and version, software and file names, who your mobile network operator is and other mobile network information.
b. Most mobile platforms (such as iOS and Android) have defined certain types of device data that apps cannot access without your consent. These platforms have different permission systems for obtaining your consent. The operating system used by your mobile device will require your consent before it allows the BPme App to access certain types of device data.
b. Use of your personal data
We may use your personal data for the following purposes:
i. to create a BP user account to allow you to access BPme and other services that may be offered by BP.
ii. to verify your identity for use of the BPme App (this includes, where relevant, allowing the ultimate account holder of your BP Fuelcard to authorise your use of the Pay for Fuel BPme service) and to conduct address verification or credit checks for invoicing and billing purposes.
iii. to facilitate the payment for products and services purchased by you through the BPme App.
iv. to locate nearby BP petrol stations using Station Finder. You can disable location services using the settings in your phone’s operating system but this may prevent or limit your use of the Pay for Fuel and Station Finder services.
v. to assist in identifying offers available to you when you visit the offers tab and providing these tailored offers to you through the BPme App.
If you consent to us using your phone’s location, we can tailor these in-app offers so that they are specific to the BP store you visit while using the BPme App. If you want to withdraw your consent to store-specific offers, please visit the settings page in the BPme App (Account > Settings > Communication Preferences). This will mean that offers will still appear when you visit the offers tab, but some of these offers may not be redeemable at the store you are visiting.
vi. to send you targeted email marketing communications and mobile push notifications about BP products and services which we think will be of interest to you. You can opt out of receiving these direct marketing communications at any time by following the instructions set out in each marketing communication or by changing your preferences within the app by visiting the ‘Settings’ section of the app (Account>Settings>Communications Preferences).
vii. to analyse your shopping behaviour (based on your purchases at BP petrol stations and your use of the BPme app), in order to enable us to send you targeted BP offers and marketing communications which we think will be of interest to you. You can opt out of such data analysis by opting out of receiving marketing communications as described in (vi) above.
viii. to carry out research into how customers are interacting with BP so that we can improve our products, services, and customer communications.
3. Legal basis for processing your personal data
a. For most uses of your personal data described above, BP relies on the fact that it has a legitimate business interest in collecting and using your personal data for purposes such as facilitating your payments through the BPme app, sending you offers and carrying out customer research and data analytics.
b. In some situations, for example when using your location data, we rely on your consent as the basis for collecting and using such data. You can withdraw your consent at any time by either changing your privacy preferences within the BPme App, by contacting email@example.com or by calling 0800 402402.
4. Other sources of personal data
a. We may also collect personal information from other sources and combine that information with personal information we collect through the BPme App, for example, if you choose to link, create, or log in to your BPme App with a payment provider (e.g. PayPal ).
b. If you are an existing Nectar customer and wish to link your Nectar account to the BPme App, you will be required to provide us with your Nectar card number and Nectar account password. Your Nectar password is used for verification purposes only and not stored by the BPme app. We will obtain additional data from Nectar in order to provide you with the best Nectar offers which we believe will be of interest to you based on an analysis of your shopping history with BP and other companies participating in the Nectar scheme.
5. Disclosure and transfer of personal data to third countries
We may disclose your personal information to the following third parties:
i. As required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, request from a regulator or any other legal process served on BP.
ii. With Nectar if you choose to link your BPme App account profile with your existing Nectar profile. This will allow you to collect points while using the BPme App and also gain access to exclusive Nectar offers.
iii. If BP is subject to a takeover, divestment or acquisition we may disclose your personal information to the new (or prospective) owner of the business.
iv. In relation to the Pay for Fuel BPme service, to the ultimate account holder of your BP Fuelcard. However, we will only disclose your name, email address, mobile number and BP Fuelcard number to the ultimate account holder. We will not disclose your password or passcode.
v. In order to provide our products and services we may need to share your personal information with other companies within the BP Group, and/or with third party service providers that process data on our behalf.
vi. Since BP operates globally, BP may require your personal information to be transferred to other countries inside or outside the European Economic Area (EEA). Where we transfer personal information to other wholly-owned BP entities we have Binding Corporate Rules in place, which have been approved by various national regulators, in order to ensure an adequate level of protection wherever these BP entities are based.
vii. Third-party service providers acting on our behalf may only use your data in accordance with our written instructions and must comply with the technical and organizational protections we have put in place. Any transfer of personal data to third-parties based outside the EEA is governed by a standardised set of data protection clauses (as required by the European Commission). A copy of these clauses is available on request.
6. Retention period
a. We will retain your personal information only for as long as is necessary for the purpose(s) for which it was collected, and for any other linked purpose.
b. To permanently delete your:
· BPme App; and/or
· BP user account
Please contact firstname.lastname@example.org or call 0800 402402. If you delete your BP user account please note that all of the apps linked to your account will also be deleted. Upon receipt of such a request we will delete or irreversibly anonymise you data within 28 days.
c. BP user accounts or BPme subscriptions which have not been used for 24 months will be automatically deleted or irreversibly anonymised.
d. We are legally obliged to retain commercial transaction data for a period of 7 years. Personal identifiers will then be removed in order to de-identify the data. We may also continue to use the aggregated form of the data (i.e. where the data of numerous individuals is combined to prevent identification of a single person) for statistical purposes.
e. We may retain your personal information insofar as it may be necessary to defend or prosecute any legal claim(s).
7. Your Rights, Questions and Complaints
a. With regard to your personal data which BP has collected and processed, you are entitled to:
i. access and review a copy of your personal data;
ii. have incomplete or inaccurate personal data which relate to your corrected;
iii. ask for deletion of your personal data, where it is being processed unlawfully;
iv. object (i.e. ask BP to stop processing your personal data to profile you or send you direct marketing materials); and
v. any additional rights afforded by the applicable law in force at the time.
Please note: your exercise of the above-listed rights may be subject to certain exemptions.
b. If you want access to your personal information or exercise any of your other privacy rights, please contact email@example.com.
c. If you wish to make a complaint or query about BP’s use of your data, you should first contact BP using the contact details above. BP operates an EU-approved complaint resolution mechanism under the BCRs. As an EU citizen, you also have the right to lodge a complaint with your national data protection supervisory authority if you are dissatisfied with our response.
8. How to change your privacy preferences
a. You can change your privacy preferences at any time by selecting Account >Settings >Communication Preferences within the BPme App. Please note: your privacy preferences may affect the BPme App functionality.
9. Keeping personal information accurate
a. We are committed to ensuring that your personal information is kept accurate and up to date. It is your responsibility to let us know if there are inaccuracies or changes to your personal information.
b. Please notify us at firstname.lastname@example.org if there are any changes to or inaccuracies in your personal information, providing us with sufficient information to enable us to identify you, so that any changes can be made.
For further information about cookies, visit www.allaboutcookies.org.
b. The BP.com website uses persistent cookies, which:
Collect information about how visitors use it, allowing us to enhance the performance of our websites by analysing such information (e.g., to maintain a consistent look and feel for the visitor) and increase the website’s functionality and make it more personal to you by allowing us to remember your previous choices (e.g., your location and preferred font type and size) and to provide any enhanced features detailed in the cookie-specific user notice.
These cookies expire two years after your last visit. The information they collect is not used to send you targeted advertising, identify who you are or remember where you’ve been on the internet (with the exception of logging visits to other BP sites). You agree that your attention was drawn specifically to this section of our privacy statement and to any explicit privacy notice given to you and that you consent to our use of these cookies for these purposes.
c. To delete or stop cookies or similar technology being placed on your device, refer to the help menu on your internet browser. In a few cases, blocking cookies may reduce the functionality of some websites or the BPme App and prevent access to them altogether.
BP does not knowingly collect information from children. This BPme App is intended for motorists of driving age only and should not be used by persons under the age of 17, nor any person without a valid UK driving license. If you are not legally allowed to drive, please do not use the BPme App and/or provide BP with your personal information.
12. Changes to this privacy statement
We review this privacy statement regularly and may modify it from time to time. We will place any updates on the BPme App. By continuing to use the BPme App after such changes have been made, you acknowledge and agree you have read, understood and accept the changes.