BP Australia Pty Ltd Privacy Policy

Introduction

Your privacy is important to BP Australia Pty Limited (ABN 53 004 085 616) and its related bodies corporate (“BP”). BP provides this privacy policy to you to inform you about the type of information we collect from you and how we use that information. BP seeks to comply with its obligations under the Privacy Act 1988 (Cth) (as amended) in particular the obligations contained in the National Privacy Principles (“NPP”). Personal information held by BP will be collected, secured, maintained, used and disclosed in accordance with the NPP and this Privacy Policy.

This Privacy Policy broadly outlines the controls which BP has adopted to manage your Personal Information, the circumstances in which BP might disclose your Personal Information to third parties, how you can access your Personal Information held by BP and what you can do if you are unhappy with BP's management of your Personal Information.

Your acknowledgement

This Privacy Policy is published on BP’s website, bp.com.au and may be updated from time to time. It is your responsibility to check the terms of this privacy policy to confirm the terms that apply at any particular point in time.

When you use BP’s website or are referred to this privacy policy by a BP representative, this constitutes an acknowledgement that you have been made aware of BP’s privacy policies.

This policy does not create any individual any rights, or impose upon BP any obligations that are in addition those imposed by the Privacy Act 1988 (Cth) or related legislation.

What is Personal Information?

“Personal Information” is information or an opinion, whether true or not, regarding a person where the identity of the person is apparent or can reasonably be ascertained from the information or opinion. Personal Information may include, but is not limited to, date of birth, gender, employment applications and resumes, tax information, family details and contact details.

Personal Information includes 'sensitive information'. Sensitive information is information or an opinion about a person's racial or ethnic origin, political opinions, membership of a political association, religious beliefs or affiliations, philosophical beliefs, membership of a professional or trade association, membership of a trade union, sexual preferences or practices, criminal record or health.

What is not Personal Information?

Information where BP has removed any reference to a person and provided that the identity of the person can no longer be ascertained from the information, is not Personal Information. BP may use this information for its own purposes.

Who does the BP privacy policy apply to?

This Privacy Policy applies to all Personal Information that BP currently holds or may in the future collect from you as part of its dealings with you, whether those dealings are via one of BP’s service stations, call centres, websites or offices. We encourage you to check our website, bp.com.au, regularly for any updates to this Privacy Policy.

How is Personal Information collected?

As part of BP’s business operations, BP may collect Personal Information directly from individuals, third parties or, if the individual has consented to such collection or would reasonably expect BP to collect their Personal Information in this way, form publicly available sources.

BP collects Personal Information through various avenues in the course of conducting its businesses, including:

• providing goods or services to customers;
• responding to questions regarding our products and our business;
• interacting with people via our websites, service centres or call centres;
• the supply of goods or services to BP as a supplier, employee, contractor or agent;
• conducting trade promotions and competitions; and
• security video surveillance at BP sites.

Where reasonable and practicable, BP will collect Personal Information directly from the person and inform the person that this is being done.

In some circumstances, it is necessary for BP to collect Personal Information through third party service providers or agents (eg BP customer information received from operators of BP service stations) or from a source of publicly available information (eg a telephone book).

At or soon after the time when BP collects Personal Information, BP will take reasonable steps to ensure that the person is aware of which BP company has undertaken the collection and the purpose(s) of the collection.

Collection of sensitive information

Sensitive information includes that information which may reveal your racial or ethnic origin, religious or philosophical beliefs or affiliations, membership of a professional or trade association, membership of a trade union, details of health, disability, sexual orientation, or criminal record. BP will only collect sensitive information about individuals with their consent unless the collection is required by law, is necessary to prevent or lessen a serious and imminent threat to the person's (or another person's) life or health or, is necessary in relation to legal proceedings (current, anticipated or potential).

How does BP use Personal Information?

The purpose for which Personal Information was collected determines how BP will use that Personal Information.

BP may use Personal Information for its primary purpose of collection (eg providing goods or services to the person) or for any related secondary purpose that we could reasonably be expected to use the personal information for.

In certain circumstances, BP may use Personal Information for promotional or direct marketing purposes. However, a person may at any time request BP not to use their Personal Information for sending direct marketing material to that person. Such a request can be made by contacting BP either in writing, by email or by telephone at the contact details below. There is no fee for making such a request.

Disclosure of Personal Information

BP respects the privacy of Personal Information and we will take reasonable steps to keep it strictly confidential.

BP may disclose your Personal Information locally and overseas, to other parties, including our subsidiary and affiliated companies, your adviser, your employer and / or financial institutions you nominate, mail houses and archive companies, and to any agent, contractor or third party who provides administrative or other services to BP or its subsidiary and affiliated companies.

BP will only disclose your Personal Information to these parties for the primary purpose for which it was collected. BP may disclose Personal Information to third parties for a related secondary purpose, if the disclosure could be reasonably expected (eg disclosure to a delivery contractor for the purpose of delivering goods ordered from BP). Where such a disclosure is necessary, BP will require the third party to treat the Personal Information in a manner that is consistent with this policy or substantially similar to the NPP.

BP is entitled to disclose your Personal Information to third parties, such as law enforcement agencies or government authorities, without your authorisation in accordance with the NPP. For example, where such disclosure is required by legislation to report illegal activities or it is necessary to protect, defend or enforce BP's legal rights, interests or claims or necessary to prevent a serious threat to a persons' health or safety.

BP will not sell your Personal Information to a third party without your consent. BP may sell de-identified, aggregated data to third parties that can not be used to specifically identify an individual.

Disclosure between BP companies in Australia BP may disclose Personal Information to a related company in Australia, subject to the provisions of the Privacy Act. In such circumstances, the related company will only use the Personal Information for the same purposes that the disclosing BP company is authorised to use the Personal Information for.

Disclosure outside Australia BP will not transfer Personal Information overseas to a third party unless BP reasonably believes that the recipient of the information is subject to a law, binding scheme or contract which effectively upholds principles for fair handling of the information that are substantially similar to the NPP or the individual the subject of the information has consented to such disclosure.

Security of Personal Information

BP stores information in different ways, including in electronic and paper form. The security of your Personal Information is important to BP and we take reasonable steps to ensure that it is held securely from unauthorised access, misuse, loss, modification or disclosure. BP does not guarantee that Personal Information cannot be accessed by an unauthorised person (e.g. a hacker) or that unauthorised disclosures will not occur.

BP will take reasonable steps to destroy or permanently de-identify Personal Information if it is no longer needed for the purposes for which BP is authorised to use it.

Accessing Personal Information

A person may request in writing access to their Personal Information held by BP by sending their request to the address below.

A person may be granted access to their Personal Information as soon as possible, subject to the circumstances of the request.

A request to access Personal Information will be rejected if:

(a) the request is frivolous or vexatious;
(b) providing access would have an unreasonable impact on the privacy of another person;
(c) providing access would pose a serious and imminent threat to the life or health of any person;
(d) providing access would prejudice BP’s legal rights; or
(e) there are other legal grounds to deny the request.

BP may charge a fee for reasonable costs incurred in responding to an access request. The fee (if any) will be disclosed prior to providing the requested information.

Correcting Personal Information

BP will take reasonable steps to ensure the accuracy and completeness of the Personal Information we hold. However, if BP holds Personal Information about an individual and the individual is able to establish that the information is not accurate, complete and up to date, BP will take reasonable steps to correct the information so that it is accurate, complete and up-to-date.

The complaints resolution process

BP provides a confidential, effective and simple process to respond to any complaints regarding privacy and BP. If you have a query or complaint with regards to BPs privacy policy and procedures, please contact the BP Privacy Officer as per the details below (phone or write). BP does not recommend the use of email for any confidential enquiry, as it is unable to assure the security of information contained in an email outside of BP’s network.

The Privacy Officer will, in the first instance, reply to your enquiry within 30 working days and outline BP’s response to the complaint or request additional information.

If the complaint is not resolved in a manner acceptable to the individual, the individual may seek further assistance under the NPP including, submitting the complaint to the Privacy Commissioner for review.

Contact BP

If there are any questions regarding the BP Privacy Policy or the way that BP manages Personal Information or if there are any concerns about BP's treatment of Personal Information, then BP should be contacted:

Via email: lisa.larsen@BP.com

In writing:

BP Privacy Officer GPO Box 5222 Melbourne VIC 3008

Telephone: +61 (3) 9268 4111

Changes to this privacy policy

BP reviews this privacy statement regularly and we reserve the right to modify this privacy statement from time to time. We will place any updates on bp.com.au. This privacy statement was last updated on 7 September 2012.

Hyperlinks

The BP website may provide links to other third-party websites which are out of BP’s control and are not covered by this privacy policy. If you access other sites using the links provided, the operators of these sites may collect information from you which will be used by them in accordance with their privacy policies, which may differ from ours and for which BP takes no responsibility for. We encourage you to read the privacy policies on the other sites that you visit¬