Privacy statement

1. Information about our organisation and BPme Rewards website

BP Oil UK Limited (00446915) (“BP”) is responsible for the BPme Rewards scheme website. BP is registered in England, having its registered office at: Chertsey Road, Sunbury-on-Thames, Middlesex TW16 7BP. 

This Privacy Statement does not apply to third party websites that you may access. We recommend that you read the privacy statements of any other websites that you visit as BP is not responsible for the privacy practices of these websites, which may be different to ours.

2. Personal data we collect

Registration data

When you first register for BPme Rewards, BP must collect some limited personal data so that you can participate in our loyalty scheme.  We require your name, email address and new loyalty card number to operate the scheme. This information will be used to establish an account for you and email you with your unique password and access to your new BPme Rewards account.  You will also be asked whether you would like to receive email marketing communications from BP.

Further optional data

Once you have received your password and access to your account, BP will request some further voluntary information from you including your date of birth, the number of cars in your household and annual mileage. This optional information is used primarily to help us better understand you as a customer, so that you then benefit from receiving more relevant and personalised offers and marketing communications from BP. You are not required to provide this information in order to be a member of the BPme Rewards scheme. 

You also have the choice to provide your postal address and phone number if you wish to receive offers and marketing communications from BP by post or text. 

Other personal data

When you use your BPme Rewards loyalty card, we will collect information relating to the purchases and transactions you undertake at BP in order to issue you with points and operate the loyalty scheme. 

3. How and why we use your personal data

We will use your personal data to:

Operate the BPme Rewards scheme 

We use your information to operate the BPme Rewards loyalty scheme, for example to enable you to collect and redeem points, provide other services related to the scheme and ensure that the applicable terms and conditions are observed.

Send you relevant direct marketing communications 

As part of the registration process, you will be asked to indicate your preferences for receiving BP marketing communications containing information and offers about BP products, promotions and services and those of our partners in the scheme. These communications may, depending on your selected preferences, be sent from BP by email, text and post. 

You can opt out of receiving these direct marketing communications at any time by following the instructions set out in each marketing communication or by changing your preferences within your account settings on the website/app or by contacting BPmeUK@bp.com

If you opt-out of receiving direct marketing communications, you will still receive essential service-related communications related to your account and the operation of the loyalty scheme such as points balance updates, order confirmation emails and reminders that your points are about to expire.

Identify offers and provide these offers to you when you visit the offers tab

We will show you tailored online offers and adverts when you visit the ‘Offers’ section of our website and mobile app. 

If you consent to us using your mobile phone’s location, we can tailor these in-app offers so that they are specific to the BP store you visit while using the BPme Rewards app. If you want to withdraw your consent to store-specific offers, please visit the settings page in the BPme Rewards app (Account > Settings > Communication Preferences). This will mean that generic offers will still appear when you visit the offers tab, but some of these offers may not be redeemable at the store you are visiting.

Understand you better to provide personalised offers and marketing communications

BP will use your information to analyse and understand your shopping behaviour based on your purchases at BP petrol stations so that we can provide you with personalised BP offers and marketing communications which we think will be of interest to you. To help us better understand you as a customer, we will also analyse how you use the loyalty programme and how you interact with our website/app and other marketing channels, including assessing the effectiveness of our offers and marketing communications. 

As part of this, we can show or send you tailored BP offers and adverts when you are browsing the internet using cookies that are stored by your internet browser or within apps on your mobile device using device identifiers. You can find out more in the cookies section  together with details of how to switch off cookies.  We may also show or send you online BP offers and adverts when you visit websites outside BP, if you have agreed to receive internet-based advertising from them. To find out more, or to opt out of their service, please visit the third party websites on which you receive advertising and follow their instructions relating to adverts shown on their site.

Carry out customer research/surveys to improve our services

We will use your data to send you invitations by email to participate in voluntary surveys so that we can improve the BPme Rewards scheme, our offers and customer communications.

We will also analyse and use your data (on an aggregate level) to carry out research into how customers are interacting with BP and the loyalty scheme so that we can improve our products, services, and customer communications.

4. When we can use your personal data (the legal basis)

For most uses of your personal data described above, BP relies on the fact that it has a legitimate business interest in collecting and using your personal data for purposes such as establishing an account for you, preventing and detecting fraud and sending you marketing communications. We also rely on this as the legal basis for carrying out customer research and data analytics regarding how you shop at BP in order to provide you with personalised offers.

We may use some of your information (e.g. purchase and payment card data) where it is necessary for us to perform the contract that we have with you or where the information is necessary to comply with a legal obligation to which we are subject.  

In some situations, for example when processing your location data, we rely on your consent as the basis for collecting and using such data. You can withdraw your consent at any time by either changing your privacy preferences in your account or by contacting BPmeUK@bp.com

5. Other sources of personal data

If you choose to purchase an item using your reward points or vouchers, BP will automatically direct you to our approved third-party service provider site, they will require some additional mandatory information to provide you with those goods. i.e.: your home address, delivery address, if different from home address and payment details. 

6. Partners

BPme Rewards will feature exciting offers from our partner organisations. You will be able to choose to redeem your points for an e-voucher to receive rewards from our partners.

Where you have agreed to receive BP marketing communications, such messages will therefore contain offers relating to our partners’ products and services which you can benefit from under the scheme, as well as BP’s own offers and promotions.

The list of partners is available here and will be updated as and when new partner relationships are launched.  

7. Disclosure and transfer of personal data to third parties

We may disclose your personal data in the following situations:

  • - if the law says we must share your personal data, or when we believe that disclosure of your data is necessary to protect our rights and/or comply with a judicial proceeding, request from a regulator or any other legal process served on BP. 
  • - if BP is subject to a takeover, divestment or acquisition we may disclose your personal data to the new (or prospective) owner of the business. 

We work with carefully selected service providers that carry out certain functions on our behalf. For example, in relation to the redemption of vouchers and reward points, you will be redirected to BP’s service provider, where you will need to provide them with additional information as outlined in section 5 above.

Third-party service providers acting on our behalf to help us operate BPme Rewards can only use your data in accordance with our written instructions and must comply with the information security protections we have put in place. Any transfer of personal data to third-parties based outside the EEA is governed by a standardised set of data protection clauses (as required by the European Commission). A copy of these clauses is available on request.

Since BP operates globally, BP may require your personal data to be transferred to other countries inside or outside the European Economic Area (EEA) where necessary to provide the service. Where we transfer personal data to other wholly-owned BP entities we have Binding Corporate Rules (BCRs)  in place, which have been approved by various national regulators, in order to ensure an adequate level of protection wherever these BP entities are based.

8. How long we keep personal data for

We will retain your personal data only for as long as is necessary in order to fulfil the purpose(s) for which it was collected (as described in this Privacy Statement).

As a general rule, we retain the information you provide when you register, together with information we collect about you and your use of the scheme, for the duration of your membership of the scheme.

If you do not earn or redeem points for a period of 24 months we will, in accordance with the Terms and Conditions, deem your account to be inactive. BPme Rewards accounts (and associated customer data) which have not been used for a further period of 24 months will at that point be automatically deleted or irreversibly anonymised.

We may retain some of your personal data for a longer period insofar as it may be necessary to defend or prosecute any legal claim(s).

We are legally obliged to retain commercial transaction data for a period of 7 years.  Personal identifiers will then be removed in order to de-identify the data.  We may also continue to use the aggregated form of the data (i.e. where the data of numerous individuals is combined to prevent identification of a single person) for statistical purposes.

To permanently delete your BPme Rewards account, please contact BPmeUK@bp.com.

9. Your Rights, Questions and Complaints

You have the following legal rights in relation to the use of your personal data. You are entitled to:

 - access and receive a copy of the personal data we hold about you;

 - have incomplete or inaccurate personal data which relate to you corrected;

 - ask for deletion of your personal data, where it is being processed unlawfully and in certain other circumstances;

 - object to the processing of your personal data in certain circumstances (i.e. ask BP to stop sending you direct marketing communications or stop processing your personal data to analyse your shopping behaviour);

 - restrict our use of your personal data in certain situations e.g. where you are contesting the accuracy of the data that we hold about you; and

 - have us transfer or ‘port’ a copy of some of your data to another organisation.

You can access your account information (including transactions and points redemption history), change your marketing preferences and other privacy settings by visiting your account settings on the website. 

If you have any questions about how we use your personal data, or if you want to access your data or exercise any of your other privacy rights including deleting your data, contact our Careline at BPmeUK@bp.com

If you wish to make a complaint or query about BP’s use of your data, we encourage you to use BP’s EU-approved complaint resolution mechanism under our BCRs using the contact address set out in section 1 above. As an EU citizen, you also have the right to lodge a complaint with your national data protection supervisory authority.

10. Helping us to keep your personal data accurate

We are committed to ensuring that your personal data is kept accurate and up to date. It is your responsibility to let us know if there are inaccuracies or changes to your personal data.

You can update your contact details and other data via your account settings (click on ‘Edit my profile’). Please notify us at BPmeUK@bp.com if there are any further changes to or inaccuracies in your personal data, providing us with sufficient information to enable us to identify you, so that any changes can be made. 

11. Our use of Cookies and your choices

On your first visit to this site you are asked (via a banner) if you would like to accept our use of cookies and similar technologies. You can find out more information and choose to opt out of specific uses of cookies  by clicking ‘manage cookie preferences’ on the banner. 

To learn more about what cookies and similar technologies are, we recommend that you visit the following third party website: www.allaboutcookies.org

Like many websites, we use cookies for a variety of purposes. Some cookies are necessary for the functionality of the site, others log data about your device hardware and your interaction with our site.   We use cloud based servers hosted by third party service providers (which may be located outside the EEA) to collect site traffic information.

We use the following types of cookies: 


FUNCTIONAL COOKIES

These cookies are required for basic site functionality and are therefore always enabled. For instance when you exit our cookie banner, a cookie is dropped on your device reminding your browser not to serve this pop-up box again when you later visit the BPme Rewards website


PERFORMANCE COOKIES

Analytics

We use a third-party web analytics tool to collect information about how visitors use and interact with our site. The cookies collect information about the number of visitors to our site, the pages or content with the most traffic, approximately where in the world you are visiting the site from; and how you have found our site e.g. from a direct search; link on a third-party site; or link in one of our emails.

We use this information to help improve the site, for instance by prioritizing updates of the most read content or the most used functionality.


ADVERTISING AND CAMPAIGN COOKIES

Social media cookies

Sometimes we pair up with social media partners such as Facebook or with online advertising platforms who drop cookies on your device when you visit our site in order to remember that you have looked at our site/expressed an interest in our products ("Third-party cookies"). This means that when you later visit these third party sites, or visit a site which has agreed to host adverts for our online advertising platform, the adverts displayed to you are more tailored to your apparent interests. If you click on these adverts they will re-direct you back to our site.

Our third-party partners may pass us information about the total number of views, shares, and click-throughs these adverts have received.


Conversion tracking

In order to see how successfully our marketing campaigns or other website goals are performing we sometimes use conversion pixels, which fire a short line of code to tell us when you have clicked on a particular button on our website or reached a particular page (e.g. a thank you page once you have completed the procedure for subscribing to one of our services or have completed one of our forms).

Unless otherwise specified the above cookies remain when you close your browser. You can use your browser settings to delete existing cookies. 

12. Changes to this Privacy Statement

We review this Privacy Statement regularly and may modify it from time to time. This Privacy Statement was last updated on 1st June 2019.