CaltexGO Privacy Statement
Chevron Australia Downstream Pty Ltd and its parent and other affiliated or related companies (“Chevron” or “we”) are committed to protecting your privacy. Chevron is bound by the Australian Privacy Principles in the Privacy Act 1988 (Cth), as well as other applicable laws protecting privacy. This privacy statement explains the steps we take to collect, use and protect personal data of users of the CaltexGo mobile application (“Application”). It describes what categories of personal data we collect, how we hold and collect that data, the purposes for which we use and disclose that data, your choices regarding use of personal data about you, our security measures, how you can review and correct data about you, and how you can complain about a breach of the Australian Privacy Principles and how we will deal with such complaint. By accessing and/or using the Application, you consent to the data collection, and use and disclosure practices described in this privacy statement. This privacy statement does not apply to websites, applications and/or other services that display or link to a different privacy statement or policy.
As used throughout this Privacy Statement, the term "Chevron" and such terms as "the company," "legal entity," "the corporation," "our," "we" and "us" may refer to Chevron Australia Downstream Pty Ltd, or one or more or all of Chevron Australia Downstream Pty Ltd’s related corporations and/or affiliates. All of these terms are used for convenience only and are not intended as a precise designation of any of the separate companies, each of which manages its own affairs.
Collection of personal information and purpose
We collect and hold the personal data we need to provide our products, services and information to our customers, the community, our contractors and other affiliated entities, for our functions and activities, and to comply with the law. You are not required to provide this information, or you may choose to use a pseudonym when dealing with us however, we may not be able to provide you the requested service or complete your transaction. If you provide us with your personal data, and we have not solicited that data, we may destroy or de-identify it.
If appropriate, we will generally tell you, or it will be obvious from the circumstances, why we are collecting personal data when we collect the information and how we plan to use or disclose the information.
We will generally collect information relating to you directly from you. However, we may collect information about you from a third party, such as a contracting company or via third party service providers, or from publicly available reference sources.
The following are the main types of personal data collected and held by us and the main purposes for which they are collected and held.
Data collected directly from users. In order to access and/or use the Application, we may ask you for personal data to register your user account (“Account”) in the Application, to provide a service offered through the Application or to carry out a transaction you request. The personal data and other information that we collect or retain may include:
(i) contact details, such as your name, title, email address, mobile phone number, and physical address (if applicable);
(ii) your preferences with respect to email or digital marketing;
(iii) depending on the location settings you select for the Application or on your device – location information including your approximate or precise location and Caltex service stations near you and/or visited by you;
(iv) your inquiries about and orders for our products and services, as well as information that assists us in identifying the best products and services for you;
(v) contest entry and event registration information; and
(vi) feedback from you about our products and services, including our websites.
You are not required to provide this information. However, if you choose not to, certain functionality within the Application may not be available and we may not be able to provide you the requested service or complete your transaction.
Data collected by automated means. We automatically collect certain data about all users of the Application, including:
(i) device information – such as your device type and ID, mobile device language, operating system and version and mobile network information;
(ii) log information – such as your Internet Protocol (IP) address, the date and time you access the Application, length of visit, the features or pages you view and number of views, the links you click, and other system activity relating to the Application;
(iii) if you purchase fuel at our service stations – data relating to the transaction(s) including the type of fuel purchased, amount charged, discount or promotion code applied, time and date of purchase, frequency of purchases; and
(iv) if you register any loyalty or partner card(s) – data relating to the card transactions including location of the transaction, date and time of transaction, redemption of loyalty or rewards points, balance enquiries.
Through your Account to which you logon, we may connect such information with your identity and email address to determine your potential interests in our products and services. We may also combine information we collect about you with information received from third parties. Apart from information which may be linked to a specific user, we may also collect data on an aggregated or anonymised basis that does not directly identify any specific user.
We use the data and information collected to, amongst other legitimate business purposes, improve our security measures, to better understand how users access and use the Application and how it can be improved to better meet your needs, as well as to gauge interest in our products and services.
Purpose of collection of personal information
We will use personal data only for the purposes set forth below.
Services and transactions. We use personal data collected through the Application to deliver services or execute transactions you request, such as providing information about Chevron products and services, processing orders and payments for our products and services, facilitating use of the Application. In order to offer you a more consistent experience in interacting with Chevron, information collected through the Application may be combined with information we collect by other means.
Customer service and feedback. We may use information about you and/or collected from you to respond to your customer service requests and feedback, or take other actions to address your inquiries, or to post your comments or feedback on any social media maintained by us.
Application improvement and troubleshooting. We may use data about you to improve or enhance the Application (including our security measures) and related products or services, or to make the Application easier to use by eliminating the need for you to repeatedly enter the same information, or by customising the Application viewed through your Account to your particular preference or interests. We may also use personal data and other information for the purposes of troubleshooting, functionality testing and addressing issues regarding the Application and its functionalities.
Marketing and Promotional Communications. With your permission, we may use personal data to inform you of products, services or promotions available from Chevron or our affiliated entities. This may involve combining your personal data with other information such as the transactions you have made through the Application. Communications may be sent by email, SMS and/or through your Account in the Application (such as in-app messaging services). When collecting information that might be used to contact you about our promotions, products and services, we give you the opportunity to opt-out from receiving such communications. Moreover, each email or SMS communication we send includes the ability to unsubscribe allowing you to stop delivery of that type of communication. If you elect to unsubscribe, we will remove you from the relevant list within 10 business days.
Our use of your personal information
We generally use and disclose personal data for the purposes for which it was collected, as described above. This primarily involves carrying out our functions and activities, managing relations, or as otherwise required or authorised by law. Where the information includes sensitive personal data, including health, racial or ethnic origin information, it will only be used for compliance with applicable laws and regulations.
In fulfilling these purposes, we may disclose certain personal data to particular third-party service providers, as described below.
Where appropriate, we may handle personal data relying on exemptions that are available under applicable privacy laws, including, for example, the employee records exemption in the Privacy Act and provisions in the Privacy Act concerning the sharing of personal data among related bodies corporate.
Disclosure of your personal information
Disclosure to Chevron entities. Except as described below, personal data that you provide to Chevron via the Application will not be shared outside of Chevron, its subsidiaries and its affiliates and related corporations without your consent.
Disclosure to service providers. Chevron contracts with other companies, vendors and service providers, professional advisers and agents to provide services on our behalf, such as social media services, programming (for apps or websites who use Chevron’s APIs or whose APIs Chevron uses), marketing and promotions, data processing, sending out information and communications, processing credit card and other types of payment transactions, processing loyalty or rewards program transactions, and analysing the Application. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using those personal data for any other purposes.
Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of the personal data you provide to financial institutions, government entities and shipping companies or postal services involved in fulfilling the transaction.
Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons Chevron decides to sell, buy, merge or otherwise reorganise particular businesses. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers, or receiving it from sellers. It is Chevron's practice to seek protection for information in these types of transactions, however we cannot guarantee that any entity receiving such data from Chevron in connection with one of these transactions will comply with all of the terms of this Privacy Statement.
Disclosure on collaborative online platforms. Some of our websites or online forums or platforms promote collaboration among registered users with respect to a particular area or topic. On such online platforms, we may share your username with other participants to label comments or suggestions that you make as yours. We do not, however, share your name, contact details, or other personal data with other users of those collaborative platforms.
Chevron is committed to protecting your personal data. While no security measure can guarantee against compromise, loss or misuse (given the transmission of data over the Internet or any public network), we use a variety of security technologies and procedures to help protect your personal data from misuse, interference and loss, and from unauthorised access, modification, or disclosure. Where Chevron discloses or provides any data to any contractor, vendor or service provider, we require that each such party maintains appropriate administrative, technical and physical security measures to protect your personal data from destruction, loss, and unauthorised access. For example, we store (or ensure that our service providers store) the personal data you provide on computer systems with limited access that are located in facilities to which access is limited.
Security on the Internet. When you move around a website to which you have logged in, or from one site to another that uses the same login mechanism, we verify your identity by means of an encrypted cookie placed on your machine. If you place an order with us, view account information, or provide financial information, we protect the transmission of such data using Secure Socket Layer (SSL) encryption. Notwithstanding such measures, to the extent permitted by law Chevron shall not be liable for any loss or damage relating to, or any other consequences of, any unauthorised use, disclosure or loss of, or access to, your personal data.
For websites and applications to which you log in, it is your responsibility to ensure the security of your passwords (including the password to your device) and to not reveal this information to others. If you are sharing a device with anyone, you should always log out before leaving a website or application so that subsequent users will not be able to access your data.
Personal information retention
To the extent permitted by applicable law, we retain personal information we obtain about you as long as (1) it is needed for the purposes for which we obtained it, in accordance with the provisions of this Privacy Statement or (2) we have another lawful basis, stated in this Privacy Statement or at the point of collection, for retaining that information beyond the period for which it is necessary to serve the original purpose for obtaining the personal information.
During the period that your Account is active, to the extent permitted by applicable law, Chevron will retain your personal data and other information collected, unless you expressly request us to delete the information. Chevron may retain the information after your Account is deactivated or deleted in the following circumstances (subject to applicable law):
(i) if we are required to retain such information by applicable law or regulation, or pursuant to any requirement of any government authority having jurisdiction over Chevron;
(ii) if there is an unresolved issue relating to your Account, such as an outstanding claim or outstanding credit or payment due; or
(iii) for legitimate business purposes, including fraud prevention.
Reviewing and correcting your personal information
You have a right to access and request correction of most personal data that we have about you. In some cases, you can review and correct personal data provided through the Application by going to the page on which you provided the data. In some circumstances it may not be possible for us to provide you with all of your personal data or an exemption under the Privacy Act may apply. For instance, the employee records exemption may apply or we may not provide access to information if disclosing that information would impact on the privacy of another individual. Where we will not provide access to personal data held about you, we will tell you why. If you think that any personal data we hold about you is inaccurate, you may contact us using the contact details below and we will take reasonable steps to ensure that the information is corrected. To help protect your privacy, we may take steps to verify your identity before providing you access to your personal data. You can help us to keep data about you accurate by notifying us of any change to your mailing address, phone number or email address.
Any requests for access to or correction of personal data will be responded to within a reasonable period after the request is made.
International disclosure of personal information
Personal data collected through the Application may be stored and processed in countries outside Australia, including the United States (and the other countries around the world where our individual subsidiaries, affiliates, suppliers, or business partners maintain facilities) or any other country in which Chevron or its affiliates joint ventures or (in the case where we engage a service provider to perform certain services) its service providers maintain facilities, including countries which may not have data protection laws similar to the laws in the country from which you initially provided the information. Chevron and its affiliates have in place a set of corporate policies, and where necessary uses data transfer agreements, to govern the transfer of information between its affiliates in different countries which upholds the principles for the protection of the privacy of information consistent with the Australian Privacy Principles. By choosing to use the Application and to provide data to us through it, you consent to any such transfer of information outside of your country.
If you consider that we have failed to resolve the complaint satisfactorily, you can also complain to the Office of the Australian Information Commissioner.
Links to other websites or applications
The Application may contain links to other websites or applications, including those of other companies, professional and government organisations, and publications. While we try to link only to websites that share our high standards and respect for privacy, these websites and applications operate independently from the Application, and we do not control and are not responsible for the content, security or privacy practices employed by other websites or applications. You should review the privacy statements of those websites and applications to determine how they protect and use personal data.
Questions or complaints about our privacy practices
If you have questions or complaints regarding this Privacy Statement or our handling of personal information, please contact us here and select Topic: ‘Privacy’, or by mail at:
Data Privacy Coordinator
Chevron Australia Downstream Pty Ltd
QV1 Building, 250 St. Georges Terrace
Perth, Western Australia 6000
Telephone: +61 (8) 9216 4000
Complaints that relate to our processing of personal information within the European Union or our compliance, more generally, with the European Union’s General Data Protection Regulation (“GDPR”) may be directed to the attention of our Data Privacy Officer for the European Region, Simon Owens, by emailing email@example.com. Depending on your location, you may also have the right to file a complaint with a government regulator if you are not satisfied with our response. The name and contact details of the Data Protection Authorities in the European Union can be found here.
Changes to this privacy statement
Chevron may occasionally update this privacy statement. When we do, we will revise the "updated" date at the bottom of the privacy statement. You should revisit this page periodically to become aware of the most recent privacy terms; your use of the Application after such changes have been posted constitutes your agreement to such changes.
Last updated: 7 December 2021