1. Home
  2. Privacy statement

Privacy statement

This privacy statement explains how and why BP Oil New Zealand Ltd (New Zealand Company Number 61262) (referred to in this notice as ‘bp, ‘we’, ‘our’ and ‘us’) collects, stores, uses and shares your personal information.

 

Openness and transparency are important to us. The Privacy Act 2020 requires us to tell you certain things about the personal information we need to carry out our functions. This is where we explain our privacy practices and why you can trust us to handle your information with care and respect.

NZ General Privacy Statement

We collect, hold, use and disclose personal information in accordance with the Privacy Act 2020, to carry out functions or activities, including:

  • To provide you with products and services you have requested or administering your bp account.
  • For direct marketing purposes, such as to inform you about special offers, products and services or promotions of bp or our partners which we think may be of interest to you. However, we will not market specified types of marketing to you if you have informed us that you do not wish to receive that specific type of marketing. 
  • To personalize the services and offerings we provide to you using data analytics. 
  • For promotional and publicity purposes, such as for competitions and other promotions run by us.
  • To verify your identity and assist you in case you forget your password or login details where these are necessary to access our products or services
  • To respond to access to information or correction of information requests.
  • For security related purposes.
  • To comply with our legal obligations. 

What personal information we collect

At all times we try to only collect the information we need for the function or activity we are carrying out.
The type of personal information we collect will depend on how you interact with bp and may include:

  • Your name and contact information – for example, your name, email address, phone number, and other information that you provide when completing the registration process for the bp product or service, competition, or survey.
  • Identity and biometric information– for example, biometric information that you provide, including images of yourself, those of your identification documents, and any other information you provide when verifying your identity or completing the registration process.
  • Information about how you pay for our products and services – for example, payment method details when you pay your account online (note that we will never see nor store the details of your credit cards or debit cards. Credit card details are collected, stored, and processed by bp's payment service providers who process your payment when you pay your account online)
  • Information about your use of our websites, applications, products or services, and your device – for example, geographic information when you use the product or service; information about the way you use the product or service; your interaction with marketing communications and offers, and your communications settings, usage, and preferences; information about the device(s) you use when accessing the product or service; information about your mobile device, including, for example, the IP address of your device, the hardware model, operating system and version, software and file names, who your mobile network operator is and other mobile network information; transaction information relating to your use of the product or service (including transaction type, date, time and location, value); and both anonymised and personal information based on your use of a device, your interactions with online content (on the bp website and elsewhere), your interests, and your preferences through the use of cookies, pixels, and marketing application programming interfaces (APIs).
  • Information about your membership status with our loyalty program partners – for example, your membership status, points balance and any offers, vouchers, and discounts applicable to you from our loyalty partners.
  • Information about your preferences and opinions – for example, when you complete our surveys such as our ‘Voice of Customer’ survey, and the preferences you share with us, such as your favourite coffee order.
  • Information you provide us when you contact us – for example, information you provide to us when contacting our customer service center; and information you provide to us when using the ‘contact us’ form on our website.
  • Information for security related purposes – for example, personal information collected via security cameras when visiting our sites including licence plate number; physical description; details of identification document (for example driver’s licence); vehicle description; date and time of attendance at a bp site; and behaviour at site.


We may also collect personal information from other sources and combine that information with personal information we collect through the BPme Services, for example, if you choose to link, create, or log in to your BPme App account with a payment provider (e.g., Google Wallet) or social media (e.g., Facebook), or if you engage with a separate app or website that uses our API (or whose API we use), we may receive information about you or your connections from that site or app. 

 

Most mobile platforms (such as iOS and Android) have defined certain types of device data that apps cannot access without your consent. These platforms have different permission systems for obtaining your consent. The operating system used by your mobile device will notify you of the permissions the BPme App seeks before it accesses certain types of device data.


How we collect your personal information

The main way we collect personal information about you is when you give it to us. For example, when you:

  • Contact us to ask for information.
  • Purchase products or services from us or apply for or use a bp account.
  • Participate in customer or loyalty member promotions.
  • Enter a bp competition or promotion.
  • Provide us with information about your opinions or submit feedback.
  • Use any of our mobile applications or websites – for example, the BPme mobile application, www.bp.co.nz.

We will collect your personal information from you where possible, but where relevant we may also collect your information from third parties (such as our dealers who operate some of our bp stores, our service providers who collect your personal information on our behalf as part of the offering of our product or service or who help maintain security over bp sites, goods and systems, and our commercial partners and third parties such as our loyalty program partners who are involved in providing any benefit, reward or service to you).  We may also collect your membership status, points balance, and any offers, vouchers, and discounts applicable to you from our loyalty partners. 

 

Where you are required to undergo a verification of identity, we may also collect your personal information (including biometric data) from third parties who provide verification of identity services on our behalf as part of the sign-up process. If we collect your personal information from a third party, we will take reasonable steps to ensure that you are aware of the matters contained in this privacy statement.  

 

If you provide us with the personal information of another person, you must make them aware of the matters contained in this privacy collection notice. 

 

You do not have to provide us with information we request, however, it may affect the goods and services we can provide to you or your use of our websites or the BPme App.


If you do not provide us with your personal information

You do not have to provide us with information that we request, however, it may affect the goods and services we can provide to you, your use of our websites, or the BPme App.

 

Any personal information will be collected directly from you, unless you have authorised us to collect that information from another party.

We collect, hold, and use your personal information in line with the Privacy Act, including for the following purposes:

  •  Providing, and personalizing our products and services to you – for example, administering and providing our services related to a bp product or service, including for the purpose of personalising those services; improving the product or service you are using, or other bp products and services.
  • To verify your identity – for example, verifying your identity to assist you if you forget your password or login details where these are necessary to access our products or services.
  • To communicate with you directly or via our third party providers – for example, to communicate with you, either directly or through our service providers, by text message, telephone, push notifications, email and other electronic means.
  • To process payments and administer your account.
  • To conduct checks on your transactions and account – for example, credit card fraud checks.
  • To respond to and deal with your requests, enquiries, complaints, and for customer care. 
  • For direct marketing purposes – for example, sending you direct marketing communications, such as informing you about special offers, products and services or promotions of bp or our partners which we think may be of interest to you. However, we will not market specified types of marketing to you to you if you have informed us that you do not wish to receive that specific type of marketing.
  •  Personalising our digital marketing and advertising to you.
  • To analyse information in an anonymised form, with identifiable characteristics removed so that you will remain anonymous – for example, to assist in providing better services to you by tailoring the BPme App Services to meet your needs; to assist in identifying offers available to you and providing such offers to you through the BPme App; to gain insight into the use, popularity, and visibility of the BPme App and/or our websites, our loyalty partnership, and wildbean cafe; your engagement with marketing communications and other bp products and services.
  • To improve our services and offerings using data analytics – for example, to improve the product or service you are using, and other bp products and services.• For promotional and publicity purposes – for example, to run competitions and promotions.
  • For market research and surveys.
  • For security related purposes – to maintain security over bp sites, goods and systems.
  • To comply with our legal obligations. 

If you no longer wish to receive such marketing communications, please contact us at  customerenquiries@se1.bp.com at any time or follow the unsubscribe instructions contained in each electronic marketing communication. 

We may share your personal information with other parties outside of bp, to support us to complete some of the activities we’ve mentioned above. This may include our business or loyalty partners, our related companies, any company we are considering selling all or part of our business to, our service providers, and to third parties. For example, we may share your personal information outside of bp:

  •  For assistance with our services, marketing and promotions – for example, transaction processing, hosting and support services, and marketing and promotional agencies for use in connection with competitions and promotions run by us.
  • To conduct data analysis – for example, to understand how you use and interact with our products and services; or to enhance and tailor our loyalty program offerings, such as by understanding whether you are a loyalty member of one of our business partners.
  • To social media websites and platforms where you already have an account on those websites – for example, to re-engage you with targeted advertising.
  • To support the use of software and services in connection with the BPme App – we may share your information with any third party service provider whose software and services are used in connection with the BPme App.
  • To understand your membership status with our loyalty partners – we may share your personal data with our service providers and loyalty partners in ways that allow us to understand your membership status with our loyalty partners. This supports us with direct marketing, personalizing your experience and the digital marketing and advertising we provide to you. For example, to streamline your sign-up options with our third party loyalty program partners.
  • For security related reasons – for example to police or other government crime agencies.
  • To comply with our legal obligations. 

We may disclose your personal information to any third party if the information is in a fully anonymised and/or aggregated form – for example, we may share aggregated information about our base of users of the BPme App and our websites with our affiliates, partners, advertisers and other third parties for data analytical analysis.

 

We will not sell your personal information to third parties for the purpose of allowing them to market their products and services to you.

bp and our suppliers operate globally, which may result in us transferring your personal information to other countries. Where this is the case, we do this under a comprehensive global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal information is protected in accordance with applicable data protection laws.

 

For a full list of where bp operates, please refer to: https://www.bp.com/en/global/corporate/what-we-do/bp-worldwide.html 

We will take all practicable steps to safeguard the confidentiality and security of your personal information but cannot guarantee the security of data. You acknowledge the inherent security risks of providing information over the internet and acknowledge that bp is not responsible for any breach of security that is outside of bp’s reasonable control.

 

We will only hold your information for as long as necessary to fulfil the purposes for which it was collected, before making it non-identifiable or deleting it. 

You may request access to the personal information we hold about you. You can access or correct your personal information by contacting us. We will generally rely on you to ensure the information we hold about you is accurate and will only make changes to your personal information if you notify us. If you wish to make any changes to your personal information, you may contact us at customerenquiries@se1.bp.com or via the contact details listed in the ‘Contact us’ section of this Privacy Statement. You will need to provide us with sufficient information to identify you before any changes can be made. 

If you use any bp website or the BPme App we may also collect the following information that does not identify a particular user – it only identifies the computer or mobile device that is being used to access the bp website or BPme App:

  •  Analytics - Data about your visit, based on your IP address, is automatically logged. This information is used to see where the website or the BPme App is being used in the world to ensure coverage, and for click stream analysis to help better understand and design our websites and the BPme App. 
  •  Cookies - Short text files called “cookies” may be automatically downloaded to your computer or mobile device. Cookies enable us to provide you with a better experience by enabling the website or app to know that you have visited before and in some cases to record preferences in order to personalise your visit. Cookies also assist us to analyse the profile of our visitors. These can be session cookies which are deleted when you close your browser and/or persistent cookies which remain on your computer or mobile device for a longer period of time.

To delete or stop cookies being placed on your computer refer to the help menu on your internet browser. Not all cookies used in connection with our BPme App can be disabled. In a few cases blocking cookies may reduce the functionality of some sites or the BPme App or otherwise prevent access to them depending on your chosen browser options. 

 

For further information visit www.aboutcookies.org

If you would like to complain about how we have managed your personal information, you may contact us. We will usually request you to put your complaint in writing, and we may discuss your complaint with our service providers, loyalty partners or others, if appropriate.

 

We will respond to your complaint within a reasonable amount of time (usually within 30 days).

 

If you remain unsatisfied after your complaint has been addressed by us, you may contact The Office of the Privacy Commissioner whose contact details can be found via https://www.privacy.org.nz.

To contact us in relation to any privacy questions or to raise a complaint, you can:

  • Phone us via our Customer Call Centre: 0800 800 027 between the hours of 9am and 5pm, Monday to Friday.
  • Email us: privacyofficer@bp.com
  • Write to us: Privacy Officer,  PO Box 99873, Auckland 1149
This Privacy Statement was last updated in November 2023