We collect Personal Information when you use our Site, create an account with us or submit Personal Information to us. Personal Information is any information that relates to you, identifies you personally or could be used to identify you, such as your name, email address, phone number, and address. The types of Personal Information that we may collect about you include, but are not limited to:

1. Information You Voluntarily Provide to Us on Our Site

If you decide to contact us (e.g. by filling in a form on our Site), then you will be asked to submit limited Personal Information which is necessary for your participation in the Campaigns. Providing Personal Information this way is voluntary. If any form which collects your Personal Information allows you to voluntarily provide additional information, we seek this information because we think it will help us to assess any response from you related to the Campaigns. You do not have to provide such information if you do not wish to do so, but it may impact our ability to properly assess your application related to the Campaigns.

1. Information You Provide to Our Affiliates and Subsidiaries

We may get your Personal Information from a company controlled by or under common control with BP.

1. Site Traffic Information and Cookies

When you use the Site online, we automatically collect information about the Site you use and how you use them by using cookies, tags, and similar technologies to automatically collect information in connection with our Site. To learn more about our usage of the cookies and other tracking technologies, please see section 2 below.

We may use cookies, tags, and similar technologies to automatically collect information on our Site. These tracking technologies allow our technology partners to collect information including your computer’s IP address, your mobile device identifier, the type of internet browser you are using, operating system, referral URLs, date/time stamps, pages viewed, and simple keyword tags. Cookies or tags are bits of code that allow our technology partners to collect information including your computer’s IP address, your mobile device identifier, the type of internet browser you are using, operating system, referral URLs, date/time stamps, pages viewed, and simple keyword tags.

1. Cookies

The cookies are small web files that a site or its provider transfers to your device’s hard drive through your web browser that enables the site’s or provider’s system to recognize your browser and remember certain information.

Generally, we use first-party and may use third-party cookies for the following purposes: to make our Site function properly; to provide a secure browsing experience during your use of our Site; to collect passive information about your use of our Site; to help us improve our Site; and to remember your preferences for your convenience.

We use the following types of cookies on our Site:

• Strictly Necessary Cookies – These cookies are essential because they enable you to use our Site. For example, strictly necessary cookies allow you to access secure areas on our Site. Without these cookies, some services cannot be provided. These cookies do not gather information about you for marketing purposes. This category of cookies is essential for our Site to work and they cannot be disabled.
• Functional Cookies – We use functional cookies to remember your choices so we can tailor our Site to provide you with enhanced features and personalized content. For example, these cookies can be used to remember your name or preferences on our Site. We do not use functional cookies to target you with online marketing. This category of cookies is essential for our Site to work and they cannot be disabled.

We will only use your Personal Information as described in this Privacy Statement or as disclosed to you prior to such processing taking place.

1. To Provide You Access to our Site

We will use your Personal Information to provide you access to our Site to enable you to participate in the Campaigns. The applicable information may be provided to a third party as part of operating the Site or supporting the Campaign. All third parties that we work with are contractually obligated to protect your information as disclosed in this Privacy Statement.

1. For Internal Use

We use your Personal Information for the purposes of furthering our business, including improving our Site's content and functionality by analyzing where, on which types of devices and how our Site is used, how many visitors we receive, and where they click through to the Site from. We also use it to remember you in case you re-visit our Site.

1. To Provide You with Service-Related Communications

We will send you administrative or account-related information to keep you updated about your account and the Site. Such communications may include information about Privacy Statement updates, confirmations of your account actions, security updates or tips or other relevant information. We process your contact information to send you such communications. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Site and the Campaigns.

1. To Provide Support or Respond to You

We collect any information that you provide to us when you contact us. Without your Personal Information, we cannot respond to you or ensure your continued use of the Site.

1. To Ensure the Security of the Site

We care about keeping you secure and safe while using our Site. Keeping you safe requires us to process your Personal Information, such as your device information, activity information and other relevant information. We use such information to combat malware, malicious activities or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information.

1. To Enforce Compliance with Our Terms and Agreements or Policies

When you access or use our Site, you are bound to our Conditions of Use and this Privacy Statement. To ensure you comply with them, we process your Personal Information by actively monitoring, investigating, preventing and mitigating any alleged or actual prohibited, illicit or illegal activities on our Site. We also process your Personal Information to: investigate, prevent or mitigate violations of our internal terms, agreements or policies and enforce our agreements with third parties and business partners.

1. To Maintain Legal and Regulatory Compliance

Our Site is subject to certain laws and regulations which may require us to process your Personal Information. For example, we process your Personal Information to pay our taxes, to fulfill our business obligations, ensure compliance with employment and recruitment laws or as necessary to manage risk as required under applicable law. Without processing your Personal Information for such purposes, we may not be able to operate the Site in accordance with our legal and regulatory requirements.

We may disclose your Personal Information as described below.

1. Within Our Corporate Organization

BP is a part of a corporate organization that has many legal entities, business processes, management structures and technical systems. BP may share your Personal Information within this organization to run the Campaigns and to provide you with access to the Site and take actions based on your request. Where this is the case, we do this under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards to ensure that your personal information is protected in accordance with applicable data protection laws.

1. Third Parties

We may share your Personal Information with third-party service providers acting on our behalf to help us operate our Site. These third parties can only use your data in accordance with our written instructions and must comply with the information security protections we have put in place.

1. To Maintain Legal and Regulatory Compliance

We have the right to disclose your Personal Information as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on BP. If there is a takeover, sale or purchase of our business, we may disclose your Personal Information to the new (or prospective) owner of the business.

We take precautions to protect data and information under our control from misuse, loss or alteration. Our security measures include industry-standard physical, technical and administrative measures to prevent unauthorized access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and otherwise safeguard your Personal Information.

Please recognize that protecting your Personal Information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers and other authentication information you use to access our Site.

Since BP operates globally, BP may require your Personal Information to be transferred to other countries where necessary to provide the service. Where we transfer Personal Information to other wholly-owned BP entities, we do this under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguard (including EU standard contractual clauses) to ensure that your personal information is protected in accordance with applicable data protection laws.

We will retain your Personal Information only for as long as is necessary to fulfill the purposes for which it was collected. We may retain some of your Personal Information for a longer period insofar as it may be necessary to defend or prosecute any legal claim(s). 

1. Commercial Transaction Data

We are legally obliged to retain commercial transaction data for a period of 6 years. We may also continue to use the aggregated form of the data (i.e. where the data of numerous individuals is combined to prevent identification of a single person) for statistical purposes.

Our Site may contain links to third-party sites. This privacy statement does not apply to those third-party sites. We recommend that you read the privacy statements of any other sites that you visit as we cannot accept responsibility for the privacy practices of these sites which may be different to ours.

Our Site is not directed to, and we do not knowingly collect Personal Information from, children under the age of 16. If you are under 16, please do not attempt to fill out our forms or send any Personal Information about yourself to us. If we become aware that a child under 16 has provided us with Personal Information, we will take steps to delete such information from our files.

We are committed to ensuring that your Personal Information is kept accurate and up to date. Please notify us at innovationbpproc@bp.com if there are any further changes that you would like our assistance on, providing us with sufficient information to enable us to identify you, so that any changes can be made.

This section applies only to California residents. Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), below is a summary of the Personal Information categories, as identified and defined by the CCPA (see California Civil Code section 1798.140 (o)), that we collect, the reason we collect your Personal Information, where we obtain the Personal Information, and the third parties that we share your Personal Information.

Personal Information Categories We Collect

We generally collect the following categories of Personal Information about your when you use our Site:

• identifiers such as a name, address, unique personal identifier, email, and phone number;
• Internet or other electronic information regarding you browsing history, search history, the webpage visited before you came to our Site, length of visit and number of page views, click-stream data, locale preferences, your mobile carrier, date and time stamps associated with transactions, and system configuration information;

We generally do not collect protected classifications about our users, biometric information, professional or employment-related information, or education-related information. For more information about the Personal Information we collect and how we collect it, please refer to sections 1 and 2 above.

Purposes for Processing Personal Information Under the CCPA

We collect your Personal Information for the business purposes described in section 3. The CCPA defines a “business purpose” as the use of Personal Information for the business’s operational purposes, or other notified purposes, provided the use of Personal Information is reasonably necessary and proportionate to achieve the operational purpose for which the Personal Information was collected or another operational purpose that is compatible with the context in which the Personal Information was collected.

The following activities are considered “business purposes” under the CCPA: auditing related to a current interaction with the consumer and concurrent transactions, and auditing compliance with laws and other standards; detecting security incidents, protecting against malicious, deceptive, fraudulent, or illegal activity, and prosecuting those responsible for that activity; performing services on behalf of the business, including maintaining or servicing accounts, providing customer service, verifying customer information; repairing errors that impair existing intended functionality; Internal research for technological development; verifying or maintaining the quality or safety of, and improving, upgrading, or enhancing, a service or device that is owned, manufactured by, manufactured for, or controlled by the company.

Third Party Sharing

The categories of third parties with whom we may share your Personal Information are listed above in section 4, above.

Privacy Rights

If you are a California resident, you have rights in relation to your Personal Information; however, your rights are subject to certain exceptions. For instance, BP cannot disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the Personal Information, your account with us or the security of our network systems.

• Right Against Discrimination – You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.
• Right to Know – You have the right to request in writing: (i) a list of the categories of personal information, such as name, address, email address, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties' direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, you have the right to request: (i) the categories of personal information we have collected about you, (ii) the categories of sources from which personal information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared personal information, and (v) the specific pieces of personal information we hold about an individual. You have the right to request a copy of the specific

Personal Information we collected about you during the 12 months before your request.

• Right to Delete – You have the right to request us delete any Personal Information we have collected from you or maintain about you, subject to certain exceptions.

To assert your right to know or your right to delete your Personal Information, please contact us as innovationbpproc@bp.com. To verify your identity, we may ask you to verify Personal Information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.

• Right to Opt-Out of Selling – The CCPA broadly defines “personal information” and “selling” such that sharing identifiers in a way that benefits us may be considered a sale. You have the right to optout of having your Personal Information sold. We do not sell your Personal Information.

Shine the Light Law

California’s “Shine the Light” law (Civil Code section 1798.83) also permits California residents once per calendar year to request and receive information about a business’ disclosure of certain categories of Personal Information to other companies for direct marketing purposes. If you are a California resident and a user of our Site, you can request a copy of this information from BP by sending an email to innovationbpproc@bp.com.

If you have questions or concerns relating to the handling of your personal information, you can contact us by email at innovationbpproc@bp.com.