Personal Information held by BP Australia Pty Limited (ABN 53 004 085 616) and its related companies in Australia (“BP”) will be collected, secured, maintained, used and disclosed in accordance with the Privacy Act 1988 (Cth) (“Privacy Act”), the Australian Privacy Principles (“APPs”) and this Privacy Policy.
This Privacy Policy broadly outlines how BP will collect and manage Personal Information (as defined below), the steps it will take to protect it, how you can access or correct Personal Information that BP holds about you and what you can do if you are unhappy with BP’s management of Personal Information.
“Personal Information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not, and whether the information or opinion is in a material form or not.
The types of Personal Information that BP collects from an individual will depend on the circumstances in which the information is collected. Generally, the types of Personal Information that BP collects include:
(a) name;
(b) date of birth;
(c) gender;
(d) financial details (such as credit card details);
(e) contact details (such as email address and mobile telephone number);
(f) geographic information (for example, where you use Store Finder in the BPme mobile application which uses your location, or in-store beacons which use Bluetooth to send signals to your mobile phone to determine your location); and
(g) transaction information;
If an individual applies for employment at BP or is a BP contractor, BP may also collect information relevant to the application or engagement including qualifications, resume, bank details, tax information, family details and reference information.
BP collects Personal Information through various avenues in the course of conducting its businesses, including:
(a) directly from you when you provide Personal Information to BP or its agents or contractors, for example when you are involved in acquiring goods or services from BP or supplying goods or services to BP;
(b) directly from you when you use any of BP’s apps, via BP websites and third party websites that BP has a presence on (including social media pages and other social media applications), service centres or call centres;
(c) directly from you when you enter a trade promotion or competition;
(d) from publically available sources (including social media pages and third parties who host or analyse data relating to social media applications);
(e) from related companies;
(f) from third parties, for example service providers who assist BP to manage consumer relationships;
(g) from our commercial partners and third parties who are involved in providing any benefit, reward or service to you (either directly or on our behalf); and
(h) via security video and audio surveillance at BP sites.
Where reasonable and practical, BP will collect Personal Information directly from the individual and inform the individual that this is being done.BP does not generally require individuals to disclose “Sensitive Information”, which includes health information about individuals and information about an individual’s race, religion, criminal record, sexual orientation or beliefs. In some limited circumstances, BP may ask for your consent to collect sensitive information about you, such as if BP requests that you agree to a background check or national police check in connection with applying for employment at BP.
If you disclose sensitive information to BP for any reason, you consent to BP collecting the information and using and disclosing it for the purpose for which it was disclosed and as permitted by the Privacy Act and other relevant laws.
If BP receives Personal Information where it has taken no steps to collect the information, then within a reasonable time it will decide whether it could, under the APPs, have solicited that Personal Information itself.
If BP determines that it would not, under the APPs, have been permitted to solicit the Personal Information, BP will as soon as practical (where lawful and reasonable to do so) destroy or de-identify that unsolicited Personal Information. If BP could, under the APPs, have solicited the Personal Information then BP may use and disclose the Personal Information for the purpose for which it was disclosed and as permitted by the Privacy Act and other relevant laws.
The purpose for which BP uses and discloses Personal Information will depend on the circumstances in which it is collected. Generally, BP may use or disclose Personal Information:
(a) for the purposes for which it was collected;
(b) for a related secondary purpose, if the use or disclosure could be reasonably expected (e.g. disclosure to a delivery contractor for the purpose of delivering goods ordered from BP);
(c) for other purposes to which an individual has consented; and
(d) as otherwise authorised or required by law.
Specific purposes for which BP may use or disclose Personal Information include the purposes of:
(e) supplying good or services to, or acquiring good or services from, an individual or organisation;
(f) to improve BP’s products and services;
(g) contacting individuals for marketing purposes;
(h) considering you for a position (e.g. as an employee or contractor) at BP and, if applicable, subsequently administering and managing BP’s engagement or employment of you (including in relation to training, performance management and disciplinary action if required);
(i) for individuals that are an employee or contractor of any of our dealers, distributors, suppliers or customers, to transact with you, your employer or the party that is engaging you as a contractor and to manage our relationship with you, your employer or the party that is engaging you as a contractor;
(j) responding to an enquiry by an individual;
(k) to administer a trade promotion or competition, or BP’s apps; and
(l) to maintain security over BP premises and systems.
BP may disclose Personal Information locally and overseas to other parties including its related companies and to any agent, contractor or third party who provides administrative or other services to BP or its related companies.BP will, where commercially practical, require that any third party to whom Personal Information is disclosed will treat the Personal Information in a manner that is consistent with the APPs.
BP may disclose Personal Information to third parties, such as law enforcement agencies or government authorities, without authorisation in some circumstances, in accordance with the APPs. This may include disclosing your personal information as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on BP. In the event that BP (or one of its businesses) is subject to a takeover, divestment or acquisition, BP may disclose your Personal Information to the new owner of the business.
BP will not sell your Personal Information to a third party without your consent. BP may sell or commercialise de-identified, aggregated data to third parties that cannot be used to specifically identify an individual.
BP or its related companies may, from time to time, offer or make available specific programs, initiatives, schemes or mobile applications to its customers (or to certain types of customers, such as BP’s business, corporate and government customers). Examples of BP’s programs include the BP Plus card, the BP Regional card, and the BPme mobile application. Details of these programs can be found on BP’s website.
Where you (or your employer on your behalf, if applicable) elect to participate in such programs, BP will collect additional Personal Information about you as a result of your participation. This may include details of your transactions (including the value, number and types of products and services purchased), the time and location of each transaction and details of any BP locations that you mark as a favourite or nearby location. BP will use and disclose this additional Personal Information in accordance with this Privacy Policy.
Where BP holds Personal Information about you that it has collected from different sources, BP may combine this personal information into a single record or collection of linked records. BP may also combine or share any information that we collect from you with information collected by any of our related bodies corporate (whether within Australia or overseas).
BP may then use and disclose this combined set of information to:
(a) assess and determine your likely preferences and needs and to develop other insights about you;
(b) tailor or personalise our products and services for you; and
(c) deliver communications and information and provide you with offers that BP thinks are relevant and may be of interest to you.
We may disclose this information to our service providers so that they can conduct customer and data analytics on our behalf.
Where you are a member of a customer loyalty program that BP participates in , BP may also collect additional Personal Information about you from the operator or manager of, or other participants in, these customer loyalty programs. BP may then combine this additional personal information with the Personal Information that BP already holds about you and use and disclose this combined set of Personal Information to:
(d) send you additional personalised or tailored offers and other communications that are relevant to your membership of that customer loyalty program; and
(e) provide you with rewards, bonus points and other benefits in connection with your membership of that customer loyalty program.
We may also disclose Personal Information about you to the operator or manager of, or other participants in, these customer loyalty programs, who may use this information to send marketing or other communications to you (including on BP’s behalf) and to personalise or tailor their own offers, rewards, bonus points or other benefits for you.
In the ordinary course of business, BP may disclose Personal Information to third parties for use in the following countries: New Zealand, the United States, the United Kingdom, the European Union, Malaysia, Singapore, the Philippines and India.
Personal Information held by BP may also be disclosed to companies in the global BP group for specific purposes on particular occasions. Those companies may be in any of a large number of countries around the world.
BP may send marketing communications in line with your previously expressed marketing preferences or as otherwise permitted under the Privacy Act and other relevant laws. These marketing communications may be sent in various forms, including mail, SMS, fax and email, and app-native pop-ups, in accordance with applicable marketing laws.
If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so. Individuals who do not wish to receive such communications can contact BP at privacyofficer@bp.com to modify their preferences, or follow the opt-out instructions contained in each marketing communication.
If you use any of BP’s mobile applications we may also send you direct marketing through in app push notifications. You can manage these directly in your mobile device settings.
If you have consented to receiving marketing materials from the operator or manager of, or other participants in, any customer loyalty programs that BP participates in or from other third parties who provide any benefit, reward or service to you, then these parties may use the personal information that we disclose to them (together with any other personal information held by those third parties about you) to send personalised offers directly to you in relation to their own products and services and/or in relation to our products and services (when those offers are sent to you by those third parties on our behalf).
BP’s privacy policy also applies to its websites, including the Australian section of our main website at www.bp.com/en_au/australia.html and BP’s careers page.
As the internet is not always a secure environment, BP cannot provide any assurance regarding the security of transmission of information you communicate to us online. BP also cannot guarantee that the information you supply will not be intercepted while being transmitted over the internet. Accordingly, any personal information or other information which you send or transmit to BP online is transmitted at your own risk.
However, once BP has received your Personal Information, BP will take appropriate security measures to prevent unauthorised access, improper use or disclosure, unauthorised modification or unlawful destruction or accidental loss of Personal Information once it is under BP’s control.
BP uses, accesses and stores “cookies” (which is a small summary file containing a unique ID number) and similar web tracking technologies on its websites and in other technology applications. These cookies involve ‘first party’ cookies created by or on behalf of BP as well as ‘third party’ cookies created by other websites and third parties including advertisers.
In some cases we may collect your personal information through the use of cookies. When you access our website, we may send a cookie to your computer. This enables us to recognise your computer and greet you each time you visit our website without bothering you with a request to register or login to your BP Account.
The use of such technologies is an industry standard, and helps BP monitor the effectiveness of its advertising and how visitors use its websites/applications. BP uses such technologies to generate statistics, measure activity, improve the usefulness of its websites/applications and enhance the user experience. For example to enable us to keep track of webpages you view so that, if you consent, we can send you news and updates relating to your interests. Individuals who prefer not to receive cookies can adjust their Internet browser to refuse cookies or warn when cookies are used. However, BP websites may not function optimally without cookies. We may log IP addresses (that is, the electronic addresses of computers connected to the internet) to analyse trends, administer the website, track users movements, and gather broad demographic information.
We and our advertising partners also use advertising cookies and other web-tracking technologies, such as pixel tags and web beacons to collect information about browsing habits, analyse trends, administer our websites, track users web movements, gather broad demographic information and other marketing purposes. These are also used to make advertising more relevant to you and your interests.
When BP websites, online or mobile applications or marketing communications are accessed, BP may use such information to deliver targeting advertising to you online s based on the data stored in a cookie and other tracking information. For example, you may see an advert about BP on your social media after you have browsed our website. BP may also use analytics data supplied by third party vendors to inform and optimise its ad campaigns.
The security of Personal Information is important to BP and it takes reasonable steps to ensure that the Personal Information it holds is secure. However, except to the extent liability cannot be excluded due to the operation of statute, BP excludes all liability (including in negligence) for the consequences of any unauthorised access to, disclosure of, misuse of or loss or corruption of Personal Information. Nothing in this Privacy Policy restricts, excludes or modifies or purports to restrict, exclude or modify any statutory consumer rights under any applicable law including the Competition and Consumer Act 2010 (Cth).
Individuals should notify BP immediately if they become aware of any breach of security.
Where Personal Information is no longer needed for any purpose for which BP is authorised to use it and there is no legal requirement for BP to keep it, BP will take reasonable steps to destroy or de-identify Personal Information.
You may request access to, or correction of, your Personal Information held by BP by sending a written request to the BP Privacy Officer – see the “Contact BP” section below.
If you make a written request for access to Personal Information held by BP, BP will respond to such request within 30 days and, where reasonable and practical, give access to the Personal Information in the manner requested by you. However, BP may refuse a request for access to Personal Information where it is legally entitled to do so and, where reasonable, it will provide the reasons for this. For example, we may need to refuse access if granting access would interfere with the privacy of others.
BP may require the person requesting access to provide suitable identification and, where permitted by law, may charge a fee for giving access to Personal Information in response to an individual’s request. The fee (if any) will be disclosed prior to providing the requested information and the costs being incurred. Any such fee will not be excessive and will relate to the reasonable costs incurred in responding to the request, not to making the request itself.
BP will take reasonable steps to ensure that the Personal Information it collects is accurate, up-to-date and complete. BP is committed to ensuring that your Personal Information is kept accurate and up to date. However, BP can only make changes to your Personal Information if you notify us of any inaccuracies or changes, or if BP otherwise becomes aware that your Personal Information is no longer accurate. While BP takes reasonable steps to ensure the Personal Information that it uses or discloses is accurate, up-to-date, complete and relevant, it is also your responsibility to let us know if there are inaccuracies in or changes to your Personal Information.
Correction of Personal Information may be requested by contacting the BP Privacy Officer at the address set out in the “Contact BP” section below. If BP refuses to correct Personal Information in response to a request it will, where reasonable, provide a written notice setting out the reasons for refusal and what mechanisms are available for you to complain about BP’s refusal to correct your Personal Information. In this situation an individual may request BP to append a statement to their Personal Information that there is a dispute as to its accuracy.
Complaints regarding a breach of the Privacy Act , the APPs or this Privacy Policy should be directed to the BP Privacy Officer – see the “Contact BP” section below. BP is entitled to verify the identity of the complainant and will reply to the enquiry within 30 days.
If the complaint is not resolved in a manner acceptable to the individual the complaint may be submitted to the Office of the Australian Information Commissioner. For more information please refer to to the Office of the Australian Information Commissioner website.
Please contact the BP Privacy Officer in relation to privacy matters:
Email: privacyofficer@bp.com
Mail: BP Privacy Officer, BP Australia Pty Ltd, GPO Box 5222, Melbourne VIC 3000
Phone: 1300 130 027
BP reserves the right to review and update this Privacy Policy from time to time. BP will place any updates on this webpage. By continuing to use this website after such changes have been made, you acknowledge and agree you have read, understood and accept the changes.
This Privacy Policy was last updated on 23 December 2019.