StarCard Online Privacy Statement
Introduction
As used throughout this Privacy Statement, the terms "our," "we" and "us" refer to the Operator (as such term is defined in the Terms of Use).
This Privacy Statement explains the steps we take to collect, use and protect personal data of users of the Caltex StarCard Online mobile application (“Application”). It describes what categories of personal data we collect, the purposes for which we use those data, your choices regarding use of personal data about you, our security measures, and how you can review and correct data about you. By accessing and/or using the Application, you consent to the data collection and use practices described in this Privacy Statement. This Privacy Statement does not apply to websites, applications and/or other services that display or link to a different privacy statement or policy.
Data Collection
Data collected directly from users. In order to access and/or use the Application, we may ask you for personal data to register your user account (“Account”) in the Application, to provide a service offered through the Application or to carry out a transaction you request. The personal data and other information that we collect may include:
(i) contact details, such as your name, email address, vehicle’s license plate details and mobile number (if applicable);
(ii) your preferences with respect to email or digital marketing;
(iii) financial information, including credit card numbers, bank or customer account information and, in connection with credit requests or the provision of certain services and benefits, your national/tax identification number;
(iv) depending on the location settings you select for the Application or on your device – location information including your approximate or precise location and Caltex service stations near you and/or visited by you;
(v) information such as your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technologies;
(vi) your inquiries about and orders for our products and services, as well as information that assists us in identifying the best products and services for you;
(vii) feedback from you about our products and services, including our websites.
You are not required to provide this information. However, if you choose not to, certain functionality within the Application may not be available and we may not be able to provide you the requested service or complete your transaction.
Data collected by automated means. We collect certain data about all users of the Application, including:
(i) device information – device type and ID, mobile device language, operating systems and versions, mobile network information;
(ii) log information - Internet Protocol (IP) address, the dates and times they access the Application, length of visit, the features or pages they view and number of views, the links they click, and other system activity relating to the Application including uninstallation of the Application;
(iii) if they purchase fuel at our service stations – data relating to the transaction(s) including the type of fuel purchased, amount charged, discount or promotion code applied, time and date of purchase, frequency of purchases; balance enquiry;
Through your Account, we may connect such information with your identity and email address and/or your mobile number to determine your potential interests in our products and services. We may also combine information we collect about you with information received from third parties. Apart from information which may be linked to a specific user, we may also collect data on an aggregated or anonymized basis that does not directly identify any specific user.
We use the data and information collected to, amongst other legitimate business purposes, improve our security measures, to better understand how users access and use the Application and how it can be improved to better meet your needs, as well as to gauge interest in our products and services.
Our Use of Personal Data
We will use personal data only for the purposes set forth below.
Services and transactions. We use personal data to deliver services or execute transactions you request, such as providing information about our products and services, processing orders and payments for our products and services, facilitating use of the Application, and so forth. In order to offer you a more consistent experience in interacting with us, information collected through the Application may be combined with information we collect by other means.
Customer service and feedback. We may use information about you and/or collected from you to respond to your customer service requests and feedback, or take other actions to address your inquiries, or to post your comments or feedback on any social media maintained by us.
Application improvement and troubleshooting. We may use data about you to improve or enhance the Application (including our security measures) and related products or services provided through the Application, or to make the Application easier to use by eliminating the need for you to repeatedly enter the same information, or by customizing the Application viewed through your Account to your particular preference or interests. We may also use personal data and other information for the purposes of troubleshooting, functionality testing and addressing issues regarding the Application and its functionalities.
Marketing and Promotional Communications. With your permission, we may use personal data to inform you of products, services or promotions available from the Operator. This may involve combining your personal data with other information such as the transactions you have made through the Application. Communications may be done by email, SMS and/or through your Account in the Application (such as in-app messaging services). When collecting information that might be used to contact you about our promotions, products and services, we give you the opportunity to opt-out from receiving such communications. Moreover, each email or SMS communication we send includes an unsubscribe link allowing you to stop delivery of that type of communication. If you elect to unsubscribe, we will remove you from the relevant list within 10 business days (during which you may continue to receive such communications), however please note that thereafter we may still send you service-related or transaction-related messages such as transaction receipts or maintenance notices.
Disclosure of Personal Data
Except as described below, personal data that you provide to us via the Application will not be shared outside of affiliates of the Operator and related corporations without your consent.
Disclosure to affiliated entities. We disclose personal data to our affiliates for the purposes described in this Statement.
Disclosure to business partners. We may disclose personal data to our joint venture partners and, where appropriate, with selected business partners for a business purpose such as providing you with products or services, facilitating your transactions, or fulfilling your requests. In some cases, a partner’s own privacy policy may apply to its use of your personal data.
Disclosure to service providers. We contract with other companies, vendors and service providers to provide services on our behalf, such as social media services, programming (for apps or websites who use our APIs or whose APIs we use), marketing and promotions, data processing, sending out information and communications, processing credit card and other types of payment transactions, processing loyalty or rewards program transactions, and analyzing the Application. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using those personal data for any other purposes.
Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of the personal data you provide to financial institutions, government entities and shipping companies or postal services involved in fulfilling the transaction.
Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons we decide to sell, buy, merge or otherwise reorganize particular businesses. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers, or receiving it from sellers. Although it is our practice to seek protection for information in these types of transactions, we cannot guarantee that any entity receiving such data from us in connection with one of these transactions will comply with all of the terms of this Privacy Statement.
Disclosure on collaborative online platforms. Some of our websites or online forums or platforms promote collaboration among registered users with respect to a particular area or topic. On such online platforms, we may share your username with other participants to label comments or suggestions that you make as yours. We do not, however, share your name, contact details, or other personal data with other users of those collaborative platforms.
Disclosure to select corporate, promotional, rewards or loyalty partners. We may offer sweepstakes, contests, promotions, rewards, or loyalty programs (each, an "Offer") that provide eligible members with certain awards and specifical benefits. By participating in an Offer, you agree to the terms, conditions and/or official rules that govern that Offer. If you choose to participate in an Offer, personal data may be disclosed to third parties, including select partners, in connection with the administration of the Offer, including, without limitation, tracking and redemption of rewards and as may be required by applicable law. The third party's own privacy policy may apply to its use of your personal data.
Disclosure for other reasons. We may disclose personal data if required to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property and those of our employees, agents or customers, to enforce our agreements, policies or terms of use, or in urgent circumstances to protect the personal safety of any individual.
Choice and Access
Your choices regarding our use and disclosure of personal data:
Receiving marketing-related emails from us. If you no longer want to receive marketing related emails from us on a going-forward basis, you may opt out by clicking unsubscribe in the message or by emailing us in accordance with the “how to contact us” section below.
We will try to comply with your requests as soon as reasonably practicable. Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages, from which you cannot opt out.
How you can access or correct your personal data. You have the right to request access to and correction of information held by us about you. If you wish to access or correct your personal information, or believe we hold any other personal information about you, you may contact us in accordance with the “how to contact us” section below. We will respond to your request consistent with applicable law.
In your request, please make clear what personal data you would like to access or correct. For your protection, we may only implement requests with respect to the personal data associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the personal data provided until after the completion of such purchase or promotion).
We may also charge a fee for complying with a request to the extent permitted under applicable data protection laws.
Third-party Advertising
We use third-party advertising companies to serve advertisements regarding goods and services that may be of interest to you when you access and use the Application and other websites or online services.
You may receive advertisements based on information relating to your access to and use of the Application and other websites or online services on any of your devices, as well as on information received from third parties. These companies place or recognize a unique cookie on your browser (including through the use of pixel tags). They also use these technologies, along with information they collect about your online use, to recognize you across the devices you use, such as a mobile phone and a laptop.
If you would like more information about this practice, and to learn how to opt out of it in desktop and mobile browsers on the particular device on which you are accessing this Statement, please visit http://optout.aboutads.info/#/ and http://optout.networkadvertising.org/#/. You may download the AppChoices app at www.aboutads.info/appchoices to opt out in mobile apps.
Third-party payment services
The Application may provide functionality allowing you to make payments to us using third-party payment services with which you have created your own account. When you use such a service to make a payment to us, your personal data will be collected by such third party and not by us and will be subject to the third party’s privacy policy, rather than this Statement. We have no control over, and are not responsible for, this third party’s collection, use, and disclosure of personal data.
Security
We are committed to protecting the security of personal data. While no security measure can guarantee against compromise, loss or misuse (given the transmission of data over the Internet or any public network), we use a variety of security technologies and procedures to help protect data from unauthorized access, use, or disclosure. Where we disclose or provide any data to any contractor, vendor or service provider, we require that each such party maintains appropriate administrative, technical and physical security measures to protect your personal data from destruction, loss, and unauthorized access. For example, we store (or ensure that our service providers store) the personal data you provide on computer systems with limited access that are located in facilities to which access is limited. When you move around a site to which you have logged in, or from one site to another that uses the same login mechanism, we verify your identity by means of an encrypted cookie placed on your machine. When you place an order with us, view account information, or provide financial information, we protect the transmission of such data using Secure Socket Layer (SSL) encryption. Notwithstanding such measures, to the extent permitted by law we shall not be liable for any loss or damage relating to, or any other consequences of, any unauthorized use, disclosure or loss of, or access to, your personal data.
For sites and applications to which you log in, it is your responsibility to ensure the security of your passwords (including the password to your device) and to not reveal this information to others. If you are sharing a device with anyone, you should always log out before leaving a website or application so that subsequent users will not be able to access your data.
Retention and Review of Personal Data
During the period that your Account is active, we will retain your personal data and other information collected, unless you expressly request us to delete the information. We may retain the information (or part of such information) after your Account is deactivated or deleted in the following circumstances (subject to applicable law):
(i) if we are required or allowed to retain such information by applicable law or regulation, or pursuant to any requirement of any government authority having jurisdiction over us;
(ii) if there is an unresolved issue relating to your Account, such as an outstanding claim or outstanding credit or payment due; or
(iii) for legitimate business purposes including fraud prevention, audit and preparation of business reports.
Your Rights
In some cases, you can review and correct personal data provided through the Application by going to the page on which you provided the data. You can also make a request to review and correct personal data collected via the Application or submit any inquiries or concerns you may have regarding personal data by sending an email at Starcard-HK@bangchak.com.hk.
To the extent required by law, we provide users with (i) reasonable access to the personal information they provide through the Application, and (ii) the ability to correct such personal information. To help protect your privacy, we may take steps to verify your identity before providing you access to your personal data. You can help us to keep data about you accurate by notifying us of any change to your mailing address, phone number or email address.
International Transfers of Personal Data
Personal data collected through the Application may be stored and processed in Hong Kong, Thailand, or any other country in which we or our affiliates or related corporations or (in the case where we engage a service provider to perform certain services) its licensors or service providers maintain facilities, including countries which may not have data protection laws similar to the laws in the country from which you initially provided the information. When we transfer your information to other countries, we will protect that information to the extent required by law. By choosing to use the Application and to provide data through it, you consent to any such transfer of information outside of your country.
Links to Other Websites or Applications
The Application may contain links to other websites or applications, including those of other companies, professional and government organizations, and publications. These websites and applications operate independently from the Application, and we do not control and are not responsible for the content, security or privacy practices employed by other websites or applications. You should review the privacy statements of those websites and applications to determine how they protect and use personal data.
Children
The Application is not directed to individuals under the age of eighteen (18), and we do not knowingly collect personal data from individuals under 18. If you become aware that we may have collected personal data of minors, please contact us by emailing us in accordance with the “how to contact us” section below.
Questions about our Privacy Practices
If you have questions regarding this privacy statement or our handling of personal data, please contact us by emailing us at Starcard-HK@bangchak.com.hk.
Changes to this Privacy Statement
We may occasionally update this privacy statement. When we do, we will revise the "updated" date at the bottom of the privacy statement. You should revisit this page periodically to become aware of the most recent privacy terms; to the extend permitted by law, your use of the Application after such changes have been posted constitutes your agreement to such changes.
How to contact us
The Operator is the company responsible for the collection, use, and disclosure of your personal data under this Statement. If you have questions regarding this Statement or our handling of personal data, please contact us by email at Starcard-HK@bangchak.com.hk, or by mail at:
Customer Service Department
Bangchak Hong Kong Limited
Unit 1501, 15/F., Tower B, Manulife Financial Centre, 223-231 Wai Yip Street, Kwun Tong, Kowloon, Hong Kong
Language
In the event of any discrepancy or inconsistency between the English version and Chinese version of this Statement, the English version shall prevail.
Updated: 27 July 2026