EFFECTIVE DATE: JANUARY 1, 2020
LAST UPDATED: JANUARY 1, 2023
This Policy applies to all personal information collected during any written, electronic, and oral communications or collected online (collectively, the “Services”), which include: the website located https://www.castrol.com/en_us/united-states/home.html and all corresponding webpages and websites that link to this Policy ("Site"); and any other content, applications, features, functionality, information and services offered by us though the Site.
Use of our Services is subject to conditions of use listed in our legal notice, which you can view here: https://www.castrol.com/en_us/united-states/home/legal-notice.html (“Conditions of Use”) and this Policy. Please read the Conditions of Use and this Policy carefully before you use our Services. By using our Services, you accept the Conditions of Use and accept our privacy practices described in this Policy. If you cannot agree with this Policy or the Conditions of Use, please do not access or use our Services.
We may modify this Policy at any time, without prior notice, and changes may apply to any personal information we already hold about you, as well as any new personal information collected after the Policy is modified. If we make changes, we will notify you by revising the date at the top of this Policy. We will provide you with advanced notice if we make any material changes to how we collect, use or disclose your personal information that impact your rights under this Policy. If you continue to access or use our Services after receiving the notice of changes, you acknowledge your acceptance of the updated Policy.
In addition, we may provide you with real time disclosures or additional information about the personal information handling practices of specific parts of our Services. Such notices may supplement this Policy or provide you with additional choices about how we process your personal information.
We collect personal information when you use our Services, create an account with us or submit personal information to us. personal information is any information that relates to you, identifies you personally or could be used to identify you, such as your user ID, name, email address, phone number, address, and payment account number. The types of personal information that we may collect about you include, but are not limited to:
a. Information You Voluntarily Provide to Us on Our Services
When you request information through this Site, we may need to know some personal information about you. When emailing us, subscribing for free news or information, registering for offers, or using any features on the Site such as the Chat, we may need your name, email address, mailing address, vehicle information, and if you are a business your company name, If you chose to purchase information, goods, products, or services, we may require some additional limited financial details. Providing personal information this way is completely voluntary. If any form which collects your personal information allows you to voluntarily provide additional information, we seek this information because we think it will help us to give you a better-quality service. You do not have to provide such information if you do not wish to do so.
b. Information You Provide to Our Affiliates and Subsidiaries
We may receive personal information about you from a company controlled by or under common control with Castrol.
a. Cookies. The cookies are small web files that a site or its provider transfers to your device’s hard drive through your web browser that enables the Site’s or provider’s system to recognize your browser and remember certain information. Generally, we use first-party and third-party cookies for the following purposes: to make our Services function properly; to provide a secure browsing experience during your use of our Services; to collect passive information about your use of our Services; to measure how you interact with our marketing campaigns; to help us improve our Services; and to remember your preferences for your convenience.
We may use the following types of cookies on our Services:
b. Other Tracking Technologies. To see how successfully our marketing campaigns or other Site goals are performing we sometimes use conversion pixels, which fire a short line of code to tell us when you have clicked on a particular button or reached a particular page (e.g. a thank you page once you have completed the procedure for subscribing to one of our services or have completed one of our forms). We also use web pixels to analyze usage patterns on our Site. The use of a pixel allows us to record that a particular device, browser, or application has visited a particular webpage. As described above, we may share your personal information by allowing these third-party ad and analytics services to collect personal information via automated technologies on our Services for cross-context behavioral advertising purposes. The sharing also may be considered processing of personal information for targeted advertising under applicable law. Please see the “Your Choices” section immediately below for additional information on the rights to opt-out of this disclosure of your information. We do not sell your personal information in exchange for monetary compensation.
c. Your Choices. Your browser may provide you with the option to refuse some or all browser cookies. You may also be able to remove cookies from your browser. You can exercise your preferences in relation to cookies served on our Sites by taking the steps outlined below.
If you are a Virginia consumer, you may have the right to (1) request access to, correction of, or deletion of your personal information; and (2) opt-out of the processing of your personal information for purposes of targeted advertising or certain profiling. To exercise these rights, please contact us by phone at 1-888-CASTROL or by email at firstname.lastname@example.org. You also may opt out of the processing of your personal information for purposes of targeted advertising by clicking here. You may appeal our decision with respect to a request you have submitted by emailing us at email@example.com.
We will only use your personal information as described in this Policy or as disclosed to you prior to such processing taking place.
a. To Provide You Our Services
We will use your personal information to provide information or perform Services that you request. If the applicable information is to be provided or Service is to be performed by a third party, then we will disclose the applicable information to the third party providing the information or performing applicable Services. All third parties that we work with are contractually obligated to protect your information as disclosed in this Policy.
b. For Internal Use
We use your personal information for the purposes of furthering our business, including improving our Site's content and functionality by analyzing where, on which types of devices and how our Site is used, how many visitors we receive, and where they click through to the Site from. We also use it to remember you in case you re-visit our Site, so we will know if you have already been served with surveys, or (where Site content is undergoing testing) which version of the content you were served.
c. To Provide You with Service-Related Communications
We will send you administrative or account-related information to keep you updated about your account and the Services. Such communications may include information about Policy updates, confirmations of your account actions or transactions, security updates or tips or other relevant transaction-related information. We process your contact information to send you such communications. Service-related communications are not promotional in nature. You are not able to unsubscribe from such communications, otherwise you may miss important developments relating to your account or the Services.
d. To Provide Customer Support or Respond to You
We collect any information that you provide to us, such as in the Live Chat on the Site, when you contact us. Without your personal information, we cannot respond to you or ensure your continued use and enjoyment of the Services.
e. To Ensure the Security of the Services
We care about keeping you secure and safe while using our Services. Keeping you safe requires us to process your personal information, such as your device information, activity information and other relevant information. We use such information to combat spam, malware, malicious activities or security risks; improve and enforce our security measures; and to monitor and verify your identity so that unauthorized users do not gain access to your information. We cannot ensure the security of our Services if we do not process your personal information for security purposes.
f. To Enforce Compliance with Our Terms and Agreements or Policies
When you access or use our Services, you are bound to our Conditions of Use and this Policy. To ensure you comply with them, we process your personal information by actively monitoring, investigating, preventing and mitigating any alleged or actual prohibited, illicit or illegal activities on our Services. We also process your personal information to: investigate, prevent or mitigate violations of our internal terms, agreements or policies and enforce our agreements with third parties and business partners.
g. To Maintain Legal and Regulatory Compliance
Our Services are subject to certain laws and regulations which may require us to process your personal information. For example, we process your personal information to pay our taxes, to fulfill our business obligations, ensure compliance with employment and recruitment laws or as necessary to manage risk as required under applicable law. Without processing your personal information for such purposes, we cannot perform the Services in accordance with our legal and regulatory requirements.
Other than sharing your personal information so that you can use our Services, or as required or permitted by law, we generally do not share your personal information a with non-affiliated third parties. We may disclose your personal information as described below:
a. Within Our Corporate Organization
Castrol is a part of a corporate organization that has many legal entities, business processes, management structures and technical systems. Castrol operates globally and may share your personal information within this organization in order to provide you with the Services and take actions based on your request. Where this is the case, we do this under a comprehensive, flexible, and global compliance framework which implements appropriate measures and safeguards to ensure that your personal information is protected in accordance with applicable data protection laws.
b. Service Providers
We may share your personal information with service providers acting on our behalf to help us operate our Services. These service providers can only use your data in accordance with our written instructions and must comply with the information security protections we have put in place.
c. To Maintain Legal and Regulatory Compliance
We have the right to disclose your personal information as required by law, or when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on Castrol. If there is a takeover, sale or purchase of our business, we may disclose your personal information to the new (or prospective) owner of the business.
We take precautions to protect data and information under our control from misuse, loss or alteration. Our security measures include industry-standard physical, technical and administrative measures to prevent unauthorized access to or disclosure of your information, to maintain data accuracy, to ensure the appropriate use of information, and otherwise safeguard your personal information.
Please recognize that protecting your personal information is also your responsibility. We ask you to be responsible for safeguarding your password, secret questions and answers and other authentication information you use to access our Services.
We will retain your personal information only for as long as is necessary in order to fulfill the purposes for which it was collected as noted in Sections 3 and 9(b). We may retain some of your personal information for a longer period insofar as it may be necessary to defend or prosecute any legal claim(s).
Generally, your personal information is held from the date you create your account for as long as the Services exist. If you are a Virginia or California resident and you request account deletion, we will delete or deidentify your associated account data so that it no longer directly identifies you.
If you send us correspondence, including emails and faxes, we retain such information electronically in the records of your account. We will also electronically retain customer service correspondence and other correspondence from Castrol to you. We retain these records to measure and improve our customer service and to investigate potential fraud and violations. We may, over time, delete these records, as permitted by law.
Last Updated: January 1, 2023
This section applies only to California residents and does not apply to personal information collected about Castrol personnel, job applicants or business partners. This section uses certain terms that have the meanings given to them in the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) and its implementing regulations (collectively, the “CCPA”). For more information about the personal information we collect and how we collect it, please refer to sections 1 and 2 above.
a. Personal information Categories We Collect
We may collect (and may have collected during the 12-month period prior to the Last Updated date of this section 12) the following categories of personal information when you use our Services:
We generally do not collect protected classifications about our users, biometric information, professional or employment-related information, or education-related information. For more information about the personal information we collect and how we collect it, please refer to sections 1 and 2 above.
b. Purposes for Processing personal information
We may use (and may have used during the 12-month period prior to the Last Updated date of this section 12) your personal information for the business purposes described in section 3 and for the following business purposes:
c. Retention of personal information.
We will retain your personal information in accordance with section 6 above, but in no case longer than the time period reasonably necessary to achieve the purposes described in section 3 and section 12(b), or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law.
d. Sources of personal information.
We may obtain your personal information from the following sources:
e. Sale or sharing of personal information.
We do not sell your personal information in exchange for monetary compensation. We may share your personal information by allowing certain third parties who may also be our service providers (such as online advertising services and social networks) to collect personal information via automated technologies on our Services for social networking and cross-context behavioral advertising purposes. This kind of sharing, to third parties who are not our service providers, may be considered a “sale” under California law when the personal information is exchanged for non-monetary consideration. You have the right to opt out of these types of disclosures of your information.
We may sell or share for cross-context behavioral advertising purposes (and may have sold or shared during the 12-month period prior to the Last Updated date of this section 0), the following categories of personal information about you to online advertising services and social networks:
You have the right to opt-out of this disclosure of your information, as detailed below. We do not have actual knowledge that we sell or share the personal information of minors under 16 years of age.
f. Disclosure of personal information.
During the 12-month period prior to the Last Updated date of this section 9, we may have disclosed the following categories of personal information about you for a business purpose to the following categories of third parties:
Categories of personal information
Categories of Third Parties
g. California Consumer Privacy Rights.
You have certain choices regarding your personal information, as described below:
(a) a list of certain categories of personal information we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year and
(b) the identity of those third parties.
h. How to Submit a Request.
To submit an access, correction or deletion request please contact us by phone at 1-888-CASTROL or by email at firstname.lastname@example.org. To opt out of the sale or sharing of your personal information, click here. To submit a request as an authorized agent on behalf of a consumer, please email@example.com with the subject line “Authorized Agent Request”. To submit a Shine the Light request, please contact us as firstname.lastname@example.org. In your request, please specify in the subject line “Shine the Light Request.”
i. Verifying Requests.
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal information or complying with your deletion or correction request. If you have an online account with us, we may verify your identity by requiring you to sign into your account. If you do not have an online account with us and you request access to, correction of or deletion of your personal information, we may require you to authenticate your email address on record with us or to provide information about your transactions or prior interactions with us. In addition, if you ask us to provide you with specific pieces of personal information, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal information is the subject of the request.
j. Additional Information.
If you choose to exercise any of your rights under the CCPA, you have the right to not receive discriminatory treatment by us. To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
k. Notice of Financial Incentive:
Castrol provides certain benefits to consumers in connection with their disclosure of personal information to Castrol. Such benefits may include offers special promotions, giveaways, and sweepstakes.
To participate in the Program, we require your first and last name, email address, phone number, and information on your motor oil and vehicle. When you register through the Site, you also may provide a credit card number, debit card number or other financial information. We also collect the categories of personal information mentioned in Sections 1 and 9(a) above in connection with your participation in the Services.
During registration, you must first consent to the Conditions of Use and create an account on our Site. You may withdraw from the Program at any time by contacting us at email@example.com.
The Services offers certain financial incentives (including special promotions, giveaways, and sweepstakes) in exchange for the collection, retention, and the potential sale and sharing of the personal information we require for your participation in the Services. The special promotions, giveaways, and sweepstakes offered in connection with the Services, are reasonably related to our good faith estimate of the value provided to bp by your personal information. We estimate that the value to Castrol of the personal information you provided to facilitate participation in the Services is reasonably related to the financial incentives less the expenses related to offering these financial incentives
To assert your right to know or your right to delete your personal information, please contact us at firstname.lastname@example.org or by phone at 1-888-CASTROL. To verify your identity, we may ask you to verify personal information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.