This privacy statement explains how and why BP Oil New Zealand Ltd (New Zealand Company Number 61262) (referred to in this notice as ‘bp, ‘we’, ‘our’ and ‘us’) collects, stores, uses and shares your personal information.
Openness and transparency are important to us. The Privacy Act 2020 requires us to tell you certain things about the personal information we need to carry out our functions. This is where we explain our privacy practices and why you can trust us to handle your information with care and respect.
We collect, hold, use and disclose personal information in accordance with the Privacy Act 2020, to carry out functions or activities, including:
At all times we try to only collect the information we need for the function or activity we are carrying out.
The type of personal information we collect will depend on how you interact with bp and may include:
We may also collect personal information from other sources and combine that information with personal information we collect through the BPme Services, for example, if you choose to link, create, or log in to your BPme App account with a payment provider (e.g., Google Wallet) or social media (e.g., Facebook), or if you engage with a separate app or website that uses our API (or whose API we use), we may receive information about you or your connections from that site or app.
Most mobile platforms (such as iOS and Android) have defined certain types of device data that apps cannot access without your consent. These platforms have different permission systems for obtaining your consent. The operating system used by your mobile device will notify you of the permissions the BPme App seeks before it accesses certain types of device data.
The main way we collect personal information about you is when you give it to us. For example, when you:
We will collect your personal information from you where possible, but where relevant we may also collect your information from third parties (such as our dealers who operate some of our bp stores, our service providers who collect your personal information on our behalf as part of the offering of our product or service or who help maintain security over bp sites, goods and systems, and our commercial partners and third parties such as our loyalty program partners who are involved in providing any benefit, reward or service to you). We may also collect your membership status, points balance, and any offers, vouchers, and discounts applicable to you from our loyalty partners.
Where you are required to undergo a verification of identity, we may also collect your personal information (including biometric data) from third parties who provide verification of identity services on our behalf as part of the sign-up process. If we collect your personal information from a third party, we will take reasonable steps to ensure that you are aware of the matters contained in this privacy statement.
If you provide us with the personal information of another person, you must make them aware of the matters contained in this privacy collection notice.
You do not have to provide us with information we request, however, it may affect the goods and services we can provide to you or your use of our websites or the BPme App.
You do not have to provide us with information that we request, however, it may affect the goods and services we can provide to you, your use of our websites, or the BPme App.
Any personal information will be collected directly from you, unless you have authorised us to collect that information from another party.
We collect, hold, and use your personal information in line with the Privacy Act, including for the following purposes:
If you no longer wish to receive such marketing communications, please contact us at firstname.lastname@example.org at any time or follow the unsubscribe instructions contained in each electronic marketing communication.
We may share your personal information with other parties outside of bp, to support us to complete some of the activities we’ve mentioned above. This may include our business or loyalty partners, our related companies, any company we are considering selling all or part of our business to, our service providers, and to third parties. For example, we may share your personal information outside of bp:
We may disclose your personal information to any third party if the information is in a fully anonymised and/or aggregated form – for example, we may share aggregated information about our base of users of the BPme App and our websites with our affiliates, partners, advertisers and other third parties for data analytical analysis.
We will not sell your personal information to third parties for the purpose of allowing them to market their products and services to you.
bp and our suppliers operate globally, which may result in us transferring your personal information to other countries. Where this is the case, we do this under a comprehensive global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal information is protected in accordance with applicable data protection laws.
For a full list of where bp operates, please refer to: https://www.bp.com/en/global/corporate/what-we-do/bp-worldwide.html
We will take all practicable steps to safeguard the confidentiality and security of your personal information but cannot guarantee the security of data. You acknowledge the inherent security risks of providing information over the internet and acknowledge that bp is not responsible for any breach of security that is outside of bp’s reasonable control.
We will only hold your information for as long as necessary to fulfil the purposes for which it was collected, before making it non-identifiable or deleting it.
If you use any bp website or the BPme App we may also collect the following information that does not identify a particular user – it only identifies the computer or mobile device that is being used to access the bp website or BPme App:
To delete or stop cookies being placed on your computer refer to the help menu on your internet browser. Not all cookies used in connection with our BPme App can be disabled. In a few cases blocking cookies may reduce the functionality of some sites or the BPme App or otherwise prevent access to them depending on your chosen browser options.
For further information visit www.aboutcookies.org.
If you would like to complain about how we have managed your personal information, you may contact us. We will usually request you to put your complaint in writing, and we may discuss your complaint with our service providers, loyalty partners or others, if appropriate.
We will respond to your complaint within a reasonable amount of time (usually within 30 days).
If you remain unsatisfied after your complaint has been addressed by us, you may contact The Office of the Privacy Commissioner whose contact details can be found via https://www.privacy.org.nz.