Customer Privacy Notice

Please read this privacy notice carefully to understand when we may collect your personal data, how and why we use it, the legal basis of this use, and your rights with respect to the processing of your personal data.

Who we are?

Through your use of this website, mobile app and/or your purchase of products or services offered by bp pulse we may collect, store and process the following data about you:

• Contact and identity information: details of how to contact you, including title, name, address, email address, telephone numbers, any other information you provide to us.
• Property information: details of a property / location, including its address, availability of off-street parking, images of charging unit installations.
• Vehicle information: details of a vehicle including its make, model, registration number, year of manufacture and ownership information.
• Any other personal information that you provide to us when dealing with us by telephone, email, or interacting with our app or website.
• Marketing information: details of your consent for us to send marketing information and your preferences around this.
• Payment information: details of payment card information including debit and credit card numbers, card expiry dates, CVC numbers, cardholder and details of payments to and from you.
• Transaction information: details of products and services you have purchased from us.
• Website and app information: information about your use and interactions with our website and app.
• Customer services information: recording/reporting of faults, issues with the charging network, your feedback on bp services.
• Charging information: details of your usage of charging units.

When and why do we collect your personal data?

• If you decide to contact us, you will be invited to provide contact and identity information that will allow us to handle your enquiry effectively. Our legal basis in processing this data is legitimate interest, namely our desire to respond to your enquiry. We need the information you provide to do so effectively, and judge that this is how you would expect us to use the information supplied. If you contact us by phoning our customer service team, your call, and therefore your personal data, may be recorded. Our legal basis in processing this data is legitimate interest, namely for training and monitoring purposes.
• If your enquiry relates to potential purchase of products or services from us, you will be invited to provide additional personal data needed for us to handle your enquiry effectively. This may include property information and vehicle information. The processing of such information is necessary for the purposes of taking steps prior to entering into a contract with you.
• If you decide to purchase goods or services from us, we will collect contact and identity information, payment information and transaction information so we can execute the transaction. Our legal basis for processing this data is that the processing is necessary for the purposes of performing a contract with you.
• If you purchase a communicating unit, we will collect charging information as part of our service to you and, if agreed, will provide you with this data via our online customer portal. Our legal basis for processing this data is that the processing is necessary for the purposes of performing our contract with you.
• If you call us to discuss any faults found with the charging network or your charging unit or if you have another issue or query, we will record your information against your account. This is so that we can track the fault and ensure that it has been managed in a way that is appropriate to the fault found. The legal basis for this processing is that the processing is necessary for the purposes of performing a contract with you.
• If you decide to provide us with your vehicle registration number, we will use this information for the purpose of ensuring that you are not caught by any car park fees when charging at one of our charging units and will share it with the private companies operating such car parks. Our legal basis for processing data under these circumstances is your consent.
• We may use your personal information (including your contact and identity information) for the purpose of conducting market research and analysis to improve our systems and processes for our customers and to contact you to ask if you would like to participate in surveys from time to time. Participating in any survey is entirely voluntary and you can opt-out of doing so at any time, including in advance, by contacting us using the details provided in the queries and concerns section below. Our legal basis for processing such data for this purpose is our legitimate interest in improving our services.
• If you decide to provide us with consent to send you marketing information we will retain this data and use it along with the associated contact and identity information to deliver information about products and services we feel may be of interest to you, including up to 12 (twelve) months after you have stopped receiving our services or until you opt-out of us sending you marketing information. Our legal basis for processing data under these circumstances is consent.
• If you decide to visit our website or use our app, we may process website and app information, including information which may be deemed to be personal data. We will automatically collect information about your equipment browsing actions and patterns, which we may collect by cookies.

On your first visit to our website we will alert you to our use of cookies to manage and control your interaction with the site. We offer you information about cookies use and provide you with a means of controlling which types of cookies are permitted. We are entitled under the law to use cookies which are strictly necessary for the operation of the website, but for all other categories of cookies we will seek your permission. Acceptance of cookies (other than strictly necessary cookies) is completely voluntary. We provide more information about the use of cookies in our website cookie policy. Our legal basis for processing is consent.

You may only provide us with the personal data of another person if you have previously obtained that person’s consent to the processing of their personal data, have informed them of our identity as a data controller and of the nature of the processing taking place. Records must be retained by you as evidence of this consent and provided to us on request.

Where we are processing your data based on your consent, you can withdraw this consent at any time. We provide simple ways of doing this where we can (e.g. cookie consent form, unsubscribe links in emails). In any instance you can ask for your consent to be withdrawn by contacting us through the channels provided in the queries and concerns section below.

Change of purpose

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation as to how the processing for the new purpose is compatible with the original purpose, please contact us.

If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to do so.
Please note that we may process your personal data without your knowledge or consent where this is required or permitted by law.

How long do we keep your information?

bp pulse operates a clear retention policy to ensure personal data is kept only for so long as is necessary for the purpose for which such information is collected, after which we make it non-identifiable or delete it.

The actual length of time data is retained will depend on the purpose for which it was collected. For example, in the case of contact information relating to an enquiry not resulting in any further agreement between us we will delete personal data six (6) months after the date of our last contact. In the case of personal data from recorded calls, we will delete these calls after four (4) months. For online purchases, we do not retain payment card details after completion of the payment transaction.

Who do we share your personal data with?

We contract with third parties to host the servers supporting our websites and app and to provide services in relation to other aspects of our operations. It may be necessary to share your personal data with these third parties in connection with the purposes set out in this privacy notice. Any third-party provider we appoint must act in accordance with our written instructions when processing your personal data and must protect your personal data in line with the contractually required security measures. If we will store or transfer your personal data to a third-party provider based outside the European Economic Area, we will have safeguards in place to ensure your personal data is adequately protected and a copy of these safeguards will be available on request.

For more information about any third-party service provider and the personal information shared with them please contact us using the details provided below in the queries and concerns section below.

For sales of products and services through our website and app, we share payment card details with our payment card processors and other third parties that may be involved in the fulfilment of your order.

We will not share your data with third parties for marketing purposes unless we have your express consent to do so.

We will disclose your vehicle information (if you provided it to us) with private companies operating car parks for the purpose of ensuring that you are not caught by any car park fees when charging at one of our charging units.

We may disclose your personal data to any member of the bp Group, bp strategic partner(s) or strategic sponsor(s) where necessary in connection with the purposes set out in this privacy notice. Where personal data is transferred within the bp Group, we do this under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards (including EU standard contractual clauses) to ensure that your personal data is protected in accordance with applicable data protection laws.

We may also disclose your personal data to third parties:

• if we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; or
• if we or substantially all our assets are acquired by a third party, in which case personal data held by it about our customers will be one of the transferred assets; or
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or in order to enforce or apply other agreements; or
• to protect and defend the rights, property or safety of bp pulse, its customers, staff, suppliers or others; to comply with applicable law or co-operate with law enforcement; or to enforce its terms or other agreements.

Your personal data may be sent to your local distribution network operator to ensure that your charging unit can be fitted at your property without causing issues with the local electrical supply. This is passed on as part of the contract if you are purchasing a charging unit.

Your personal data may be sent to the National Inspection Council for Electrical Installation Contracting (NICEIC) to confirm that the installation of your charging unit meets the correct installation requirements and is recorded as part of the standard NICEIC requirements. This information is passed on as part of the contract if you are purchasing a charging unit.

Your personal data may be sent to the Office for Zero Emission Vehicles (OZEV) and other relevant third parties to enable us to apply for a government Electric Vehicle Homecharge Scheme grant on your behalf. This information is passed on as part of the contract if you are purchasing a home charging unit.

Your personal data may be sent to a third-party debt collection agency in order to collect outstanding payments from you on our behalf. You will be notified before we do this in accordance with our terms and conditions.

Changes to our privacy notice

We may make minor changes to this privacy notice in the future and will post these to this page on our website. If we make any significant changes, we will take additional steps to inform you.

Your rights relating to personal data

You have certain rights in relation to your personal data which we aim to uphold as follows. Please note that rights are not absolute and are subject to certain qualification and exceptions.

• Right to be informed: You have the right to receive clear, transparent and understandable information about how we process your personal data. Our privacy notices, including this one, aim to meet this need.
• Right to access: You can ask us for a copy of personal data we hold about you.
• Right to rectification: You can ask us to correct any error you identify in personal data we hold about you.
• Right to erasure: You can ask us to delete data we hold about you. We will do so unless we have a compelling reason to retain (e.g. legal requirement, prevention of fraud).
• Right to restrict processing: You can ask us to stop using your personal data.
• Right to data portability: You can ask us to provide your personal data in a form suitable for use by another organisation.
• Right to object: You can object to our processing of your personal data where we are doing so under the legal basis of legitimate interest.

If you would like to contact us in connection with exercising any of these rights, please do by contacting us using the contact details provided below.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

We try to respond to all legitimate requests within one month. Occasionally it could take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

Queries and concerns

If you have any queries or concerns about our handling of your personal data please contact us using the following details:

• By email: bpCMDataPrivacy@bp.com
• By post: Breckland, Linford Wood, Milton Keynes, MK14 6GY

If you are not happy with the way we have handled your personal data you can raise a complaint with us and you can also raise a complaint with the Information Commissioner’s Office here www.ico.gov.uk

Website links

Our website has different sub-sites for various businesses, products and services, which may also have their own privacy notices. Please read these if you visit our sub-sites.

Our website and app may contain links to third-party sites. This privacy notice does not apply to those third-party sites. If you follow a link to any of these third-party sites, please note that they will have their own privacy notices and that we do not accept any responsibility or liability for these sites or their privacy notices or use of your personal information.