1.Data automatically collected
We log visitor's domain and IP address automatically; this information does not identify you as an individual, but only the computer that is being used to view the site. This data is used to see where the site is being used in the world to ensure coverage, and for click stream analysis to help better understand site usage, so that we can improve our service to you. We do not link information automatically logged by such means with personal data about specific individuals. Cookies are small text files that are stored on your computer as a result of visiting a web site. This allows the site to know that you have visited before and in some cases can be used to record your preferences.
- To help us track usage patterns in order to improve and manage our sites
- To record preferences in order to personalise your visit
There are four types of cookies used on this website: Session Cookies These are temporary cookies that only remain until your browser is closed. They are used by our web application in order to maintain the information relating to your transaction from page to page following any input, such as when a form is completed over several screens. Web Analytics Cookies These cookies are used to help us compile anonymous statistics in order to improve and manage our sites. An example of the information collected would be the path you used to gain access to the site and your patterns of browsing when navigating the site. They are ‘persistent’ meaning they are not deleted when the browser is closed and expire after a period of 2 years unless you visit the same site within the 2 year period in which case the same cookie is refreshed and a new 2 year period begins. Information Cookie These cookies allow the site to remember how you have answered a question in order to change the content displayed to you. For example, if you have already taken a survey this cookie will ensure you are not asked again. They are ‘persistent’ meaning they are not deleted when the browser is closed, and expire after a period of 2 months. Membership Cookie These cookies are used to provide you with access to membership services you have subscribed to. They are ‘persistent’ meaning they are not deleted when the browser is closed, and expire after a period of 2 months. You can still use most of this site with cookies turned off. To stop cookies being placed on your terminal equipment refer to your specific internet browser. In a few cases blocking cookies may reduce the functionality of some sites or prevent access to them depending on your chosen browser options. Cookies can also easily be deleted through your specific internet browser, although this means your settings will not be retained. For further information visit www.aboutcookies.org. This link will take you to another website that is opened in a new window. BP is not responsible for the content of the www.aboutcookies.org website.
3.Data collection and use
When you request information through this site, we may need to know some personal information about you. When emailing us, or subscribing for free news or information we need your e-mail address, name and other limited personal identifiers, typically name and contact number. If you chose to purchase information, goods, products or services, we will usually require some additional limited financial details. Where you request employment related services or products we will usually need limited data about personal identifiers, education, employment, family and financial details. Your personal data will be processed to provide information, goods, products and services you request in the form that you require. If we require sensitive personal data then we will ensure that the collection and use is in strict accordance with Section 32 of Republic Act No. 8792 (Philippine – Electronic Commerce Act) principles of data protection and data privacy. We will not pass your details to anyone else outside the BP Group without your permission. Since BP operates globally, the information you submit may be transferred outside of the Philippine Area. This and all other transmissions will remain secure and under our sole control. By clicking the 'I accept' button where you offer your information in return for services, you consent to such a transfer. If we look to use your personal data for a new purpose, beyond what it was originally provided for, we will ask for your consent. You can choose to provide this consent in advance by indicating in the 'opt-in' box at the point that personal data is collected.
Data is held for one (1) year for the purposes of improving services offered after which time it is depersonalised and non-identifiable. We do not collect any additional information about you other than that outlined above.
5. Access to your personal data
6. Disclosure and Visitor choice
You may unsubscribe or opt-out of services at any time, details of how to opt-out vary between BP sites but generally it is a simple process. Where we disclose your personal data for those purposes stated, we provide you with the means to opt-out of disclosure by either indicating in a box at the point of the site where personal data is collected, by sending an email firstname.lastname@example.org or by sending postal mail to this address 30F LKG Tower, 6801 Ayala Avenue, Makati City, Philippines 1226. Where we disclose your personal data for purposes, which are different to those, stated we offer you the opportunity to consent prior to disclosure.
BP is committed to protecting the privacy needs of children and we encourage parents and guardians to take an active role in their children’s online activities and interests. BP does not knowingly collect information from children under the age of 13 and BP does not target its websites to children under 13.
We have implemented security policies, rules and technical measures to protect the personal data that we have under our control that complies fully with data privacy & protection legislation appropriate to the jurisdiction applicable to the site. The security measures are designed to prevent unauthorised access, improper use or disclosure, unauthorised modification & unlawful destruction or accidental loss. At present we do not give visitors to our Web site the option of using a secure transmission method to send us their personal data.
(b) Data Collection and Purpose Specification
(c) Disclosure and Visitor Choice (d) Confidentiality/Security (e) Privacy Compliance
The statements on the above matters are mere assurances to the customers concerning the steps that BP Philippines (formerly known as Castrol Philippines) is taking to protect and secure their personal information. We do not find anything in these provisions that runs counter to Section 32, which does not even require the website merchant to employ security mechanisms to protects its customers’ personal information. These provisions exceed the minimum requirements under Section 32. These matters are not regulated in any way by the ECA or any other legislation. These are voluntary practices in the Philippines. Based on our foregoing discussion, we conclude that:
- It is lawful for BP Philippines (formerly known as Castrol Philippines) to collect personal data and information from its customers for “purposes authorized by the Act” such as meeting the customers’ orders or request for information. Section 32 of the ECA allows collection of personal data from all users and considers it lawful for BP Philippines (formerly known as Castrol Philippines) as the collector to use the information to process the order or offer services to the person who provided the personal data.
- BP Philippines (formerly known as Castrol Philippines) as the first possessor of the data or information may lawfully transfer or convey the data or information to, or share them with, other Castrol companies where such conveyance or sharing is also necessary to process the order or offer services to the person who provided the personal data.
- The statement on the depersonalization of data and securing the customers’ consent to further uses of the information other than those specified are not prohibited by or inconsistent with Section 32.
- The assurances to the customers concerning the steps that BP Philippines (formerly known as Castrol Philippines) is taking to protect and secure their personal information exceeds the requirement under Section 32 of the Act.
- However, sharing or conveying the personal data or information to non-affiliated parties for purposes other than processing an order or offering services to the provider of the data or information is clearly prohibited by Section 32. Securing the customers’ consent to this further use of the information is a prudent practice and may negate willful intent to violate Section 32.