Effective Date of Data Privacy Statement: May 9th, 2018.
This Privacy Statement provides information on the processing of your personal information by Esso Petroleum Company, Limited and its affiliated companies through your use of the Esso Mobile Application (the “App”).
The App facilitates your transaction with the operator of the Esso branded service station from which you make a purchase. By using the App you are not purchasing products from ExxonMobil.
Your privacy is important to us and we want you to know what information we collect through the App, how we collect it, what we use it for and who we may share your personal information with. This Privacy Statement may be changed over time. You are advised to regularly review the Privacy Statement for possible changes. By using the App you are consenting to these Privacy Terms.
This App should not be used by anyone who is under the age of 16. If you are under 16 years old please do not use this App and do not send us your personal information (for example your name, age, address or email address).
2. Data Controller:
Esso Petroleum Company, Limited (“Esso”) is responsible as the data controller of personal information collected through the App. If you have any questions about the content of this Data Privacy Statement, please contact the Data Privacy Office at the following address:
Esso Petroleum Company, Limited
Attn: ExxonMobil Data Privacy Office
3. What information do we collect?
The App will allow you to submit personal information, that is, information that could identify you as an individual. When you register on the App, Esso will collect and store your login data, such as your name and email address. If you are a holder of Tesco Clubcard and you wish to collect points on qualifying purchases, the App permits you to provide your Tesco Clubcard scheme number. In that case, we will process the Tesco Clubcard scheme number. Whenever you use the App to make payment at an Esso branded service station, we collect information in relation to the payment transaction, such as time and place of your visit, number of visits, total purchase amount per transaction, products purchased, payment method you use, including payment methods embedded in the App (such as Apple Pay and PayPal). We may also collect information regarding your preferences in relation to the fuel purchase transaction, including your preferred payment method, fuel grade preference or receipt preference.
The App can collect information about your geolocation only when the App is installed and if you have given permission for location services. You are able to turn off location services in your phone or App settings, but this will mean that you lose some of the functionality of the App and as a result will need to scan the QR codes found on the pump.
If you personalise the App, participate in a promotion, or submit feedback or other information to us, you may also provide us with additional personal information.
4. Why do we collect information?
We may collect, store and use the personal information to provide you with products or services, to bill you for products and services, to tell you about products and services which we think may be of interest to you, to deliver other relevant information to you such as transaction receipts, support messages, marketing messages, details of Tesco Clubcard points collected and to provide vouchers or coupons.
Furthermore, we may use information collected about you:
1. To improve and personalise our services. For instance, we may enable features in the App in order to provide you with personal deals and offers; and/or
2. To communicate with you about news and updates about our products and services and to inform you about any promotions, incentives and rewards offered by us and/or our partners or the operators of Esso branded service stations.
We may use analytics software to track usage and behaviour on the App so that we can tailor our communications to you. We may use personal information to protect our rights and to investigate and prevent fraud or other illegal activities and for any other purpose disclosed to you in connection with our services.
5. Information on your mobile device or computer
When someone accesses the Esso website via the App, our web servers automatically gather information that allows the site to communicate with the App and/or the visitor’s device during the visit. We also track information such as the number of visits to the website, which parts of the website visitors select, IP address (the Internet address assigned to your device from your Internet Service Provider), domain type, browser type (e.g., Firefox, Chrome or Internet Explorer), date and time of day. We use such information only for statistical purposes that help us design and administer the website. We may store some information ("cookies" or other files) on your device or computer when you look at or use the App or website. This information facilitates customizing your use of the App and website and helps to avoid the need for you to re-enter your details every time you visit it. You can erase or block this information from your device if you want to. The 'help' screen in your browser or computer user manual should tell you how to do this.
6. Third party advertising
We can use third-party advertising technology to provide ads on the App. This technology will not provide any information to third party advertisers that can be used to personally identify you, so it will not include your name, address, or other personal information. When you access an ad, a "cookie" file may be stored on your mobile device. This information is used to help manage our on-line advertising. To learn more about the third-party ad-serving technology, cookies, and how to "opt-out" you can also visit www.allaboutcookies.org (note: you will be taken to a third-party website).
Hyperlinks & Sharing the App or content through Social Media
The App uses links to other websites or applications that Esso does not own, control or maintain. We cannot be responsible for their privacy policies and practices and we make no representations or warranties about the privacy practices of those websites and applications.
7. Sharing Information with Third Parties
Esso does not sell or distribute the personal information it collects via the App to third parties for the purpose of allowing those third parties to market their products and services to you. In order to process the payment transactions, Esso provides transactional data on a transaction-per-transaction basis to the site operator where the transaction took place. Transactional data includes, but is not limited to, amount of spend, product(s) purchased, frequency of visits, whether the transaction is eligible to collect Tesco Clubcard points, time of visit. Whilst we do not provide name, address or other contact details to the site operators, the site operator may be able to derive certain additional information from such transactional data, for instance in combination with CCTV installed by the site operator at the site. In addition, Esso may provide aggregated transaction data to any of the operators of Esso branded service stations however again without reference to names, email addresses or Tesco Clubcard number.
Esso does employ other companies and individuals to perform certain functions on its behalf. Examples include hosting the App, processing payments, processing Tesco Clubcard information, and sending communications (for example, e-mail and push notifications, managing customer lists, analysing data, providing marketing assistance and providing customer service). Those third parties may have access to personal information, but will only have access to the information needed to perform their functions, and cannot use it for any other purpose. They must process the personal information in accordance with this Privacy Statement and as permitted by applicable data protection laws.
We have agreements in place with those third parties providing the App service obliging them to protect the security and confidentiality of the personal information consistent with applicable policies and laws.
8. Data transfers & Sharing information with Affiliates
We may transfer the personal information we collect about you to countries other than the country in which the information was originally collected. These transfers include transfers to affiliated companies around the world so that we may analyse the data in order to improve our global products and services. When we transfer the personal information to other countries, we will protect that information as described in this Privacy Statement. By using the App and submitting data to the App, you provide express consent to these transfers, including trans-border transmission of data covered by this Privacy Statement.
We comply with applicable legal requirements providing adequate protection for the transfer of personal information to countries outside of the EEA or Switzerland including execution of standard contractual clauses by Esso and its affiliated companies as needed.
9. Data Security
We are committed to ensuring that the information collected about you is secure. We take reasonable measures including administrative, technical and physical procedures to protect your information from loss, theft, misuse, unauthorised access, disclosure, alteration, and destruction. Your full payment card details are not stored on your mobile device and we also only show masked Tesco Clubcard numbers on the App. The level of security can only be effective if you follow certain security practices yourself including using unique and strong passwords, never sharing your account or login details with anyone and by using the available mobile device security features. If you believe that any of your account login details have been exposed, you can change your password at any time through the App.
10. Opt Out/Modify Information
If you no longer wish to use the App, you can uninstall the App. You can request the removal or modification of your personal information by sending an e-mail to the Data Privacy Office (see address in Section 2). We will delete or render anonymous any personal information that is no longer needed.
11. Your Rights
When living in a country with comprehensive data privacy laws, certain rights in relation to the information collected may apply, including:
- The right to know and see what personal information is processed;
- The right to have inaccurate personal information corrected or deleted;
- The right to withdraw consent to the processing of the personal information. In this case, you will no longer be able to use the App. In this case you should uninstall / remove the app.
12. Data Retention
Esso and its affiliated companies may retain personal information you provide for the duration of the services and for as long as is necessary to provide support related reporting and trend analysis. Individual transaction data will be securely stored according to ExxonMobil’s data retention guidelines for transactional data. Receipts that are stored in the App will be visible for 90 days and will be automatically removed after those 90 days.
13. Conditions of Use, Notices and Revisions
If you choose to use the App, your use and any dispute over privacy is subject to this Privacy Statement and the Terms & Conditions, including any limitations on damages, arbitration of disputes and application of law. We reserve the right to change this statement at any time without notice.
We may change this Privacy Statement from time to time by posting the updated version on the App. We advise you to review this page regularly to stay informed and to make sure that you are happy with any changes. If we make material changes to this Privacy Statement we will notify you via email or within the App. If you object to any of the changes to our terms, you are free to stop using our services, delete the App and request for your personal information to be deleted.
¹ ExxonMobil and/or ExxonMobil Affiliates mean (a) Exxon Mobil Corporation or any parent of Exxon Mobil Corporation, (b) any company or partnership in which Exxon Mobil Corporation or any parent of Exxon Mobil Corporation, directly or indirectly, (1) owns or (2) controls, more than fifty per cent (50%) of the ownership interest having the right to vote or appoint its directors or functional equivalents (“Affiliated Company”) and (c) any joint venture in which Exxon Mobil Corporations, any parent of Exxon Mobil Corporation or an Affiliated Company has day to day operational control.