StarCard Online Privacy Statement
Chevron Malaysia Limited and its parent and other affiliated or related companies (“Chevron” or “we”) are committed to protecting your privacy. This statement explains the steps we take to collect, use and protect personal data of users of the Caltex StarCard Online Systems. It describes what categories of personal data we collect, the purposes for which we use those data, your choices regarding use of personal data about you, our security measures, and how you can review and correct data about you. By accessing and/or using the Application, you consent to the data collection and use practices described in this privacy statement. This privacy statement does not apply to websites, applications and/or other services that display or link to a different privacy statement or policy.
As used throughout this Privacy Statement, the term "Chevron" and such terms as "the company," "legal entity," "the corporation," "our," "we" and "us" may refer to Chevron Malaysia Limited, or one or more or all of Chevron Malaysia Limited's related corporations and/or affiliates. All these terms are used for convenience only and are not intended as a precise designation of any of the separate companies, each of which manages its own affairs.
Data collected directly from users. In order to access and/or use the Application, we may ask you for personal data to register your user account (“Account”) in the Application, to provide a service offered through the Application or to carry out a transaction you request. The personal data and other information that we collect may include:
(i) contact details, such as your name, email address, vehicle’s license plate details and mobile number (if applicable);
(ii) your preferences with respect to email or digital marketing;
(iii) financial information, including credit card numbers, bank or customer account information and, in connection with credit requests or the provision of certain services and benefits, your national/tax identification number;
(iv) depending on the location settings you select for the Application or on your device – location information including your approximate or precise location and Caltex service stations near you and/or visited by you;
(v) information such as your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technologies;
(vi) your inquiries about and orders for our products and services, as well as information that assists us in identifying the best products and services for you;
(vii) feedback from you about our products and services, including our websites.
You are not required to provide this information. However, if you choose not to, certain functionality within the Application may not be available and we may not be able to provide you the requested service or complete your transaction.
Data collected by automated means. We collect certain data about all users of the Application, including:
(i) device information – device type and ID, mobile device language, operating systems and versions, mobile network information;
(ii) log information - Internet Protocol (IP) address, the dates and times they access the Application, length of visit, the features or pages they view and number of views, the links they click, and other system activity relating to the Application including uninstallation of the Application;
(iii) if they purchase fuel at our service stations – data relating to the transaction(s) including the type of fuel purchased, amount charged, discount or promotion code applied, time and date of purchase, frequency of purchases; balance enquiry;
Through your Account, we may connect such information with your identity and email address and/or your mobile number to determine your potential interests in our products and services. We may also combine information we collect about you with information received from third parties. Apart from information which may be linked to a specific user, we may also collect data on an aggregated or anonymized basis that does not directly identify any specific user.
We use the data and information collected to, amongst other legitimate business purposes, improve our security measures, to better understand how users access and use the Application and how it can be improved to better meet your needs, as well as to gauge interest in our products and services.
Our Use of Personal Data
We will use personal data only for the purposes set forth below.
Services and transactions. We use personal data to deliver services or execute transactions you request, such as providing information about Chevron products and services, processing orders and payments for our products and services, facilitating use of the Application, and so forth. In order to offer you a more consistent experience in interacting with Chevron, information collected through the Application may be combined with information we collect by other means.
Customer service and feedback. We may use information about you and/or collected from you to respond to your customer service requests and feedback, or take other actions to address your inquiries, or to post your comments or feedback on any social media maintained by us.
Application improvement and troubleshooting. We may use data about you to improve or enhance the Application (including our security measures) and related products or services provided through the Application, or to make the Application easier to use by eliminating the need for you to repeatedly enter the same information, or by customizing the Application viewed through your Account to your particular preference or interests. We may also use personal data and other information for the purposes of troubleshooting, functionality testing and addressing issues regarding the Application and its functionalities.
Marketing and Promotional Communications. With your permission, we may use personal data to inform you of products, services or promotions available from Chevron. This may involve combining your personal data with other information such as the transactions you have made through the Application. Communications may be done by email, SMS and/or through your Account in the Application (such as in-app messaging services). When collecting information that might be used to contact you about our promotions, products and services, we give you the opportunity to opt-out from receiving such communications. Moreover, each email or SMS communication we send includes an unsubscribe link allowing you to stop delivery of that type of communication. If you elect to unsubscribe, we will remove you from the relevant list within 10 business days (during which you may continue to receive such communications), however please note that thereafter we may still send you service-related or transaction-related messages such as transaction receipts or maintenance notices.
Disclosure of Personal Data
Except as described below, personal data that you provide to Chevron via the Application will not be shared outside of Chevron and its affiliates and related corporations without your consent.
Disclosure to service providers. Chevron contracts with other companies, vendors and service providers to provide services on our behalf, such as social media services, programming (for apps or websites who use Chevron’s APIs or whose APIs Chevron uses), marketing and promotions, data processing, sending out information and communications, processing credit card and other types of payment transactions, processing loyalty or rewards program transactions, and analyzing the Application. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using those personal data for any other purposes.
Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of the personal data you provide to financial institutions, government entities and shipping companies or postal services involved in fulfilling the transaction.
Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons Chevron decides to sell, buy, merge or otherwise reorganize particular businesses. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers, or receiving it from sellers. Although it is Chevron's practice to seek protection for information in these types of transactions, we cannot guarantee that any entity receiving such data from Chevron in connection with one of these transactions will comply with all of the terms of this Privacy Statement.
Disclosure on collaborative online platforms. Some of our websites or online forums or platforms promote collaboration among registered users with respect to a particular area or topic. On such online platforms, we may share your username with other participants to label comments or suggestions that you make as yours. We do not, however, share your name, contact details, or other personal data with other users of those collaborative platforms.
Chevron is committed to protecting the security of personal data. While no security measure can guarantee against compromise, loss or misuse (given the transmission of data over the Internet or any public network), we use a variety of security technologies and procedures to help protect data from unauthorized access, use, or disclosure. Where Chevron discloses or provides any data to any contractor, vendor or service provider, we require that each such party maintains appropriate administrative, technical and physical security measures to protect your personal data from destruction, loss, and unauthorized access. For example, we store (or ensure that our service providers store) the personal data you provide on computer systems with limited access that are located in facilities to which access is limited. When you move around a site to which you have logged in, or from one site to another that uses the same login mechanism, we verify your identity by means of an encrypted cookie placed on your machine. When you place an order with us, view account information, or provide financial information, we protect the transmission of such data using Secure Socket Layer (SSL) encryption. Notwithstanding such measures, to the extent permitted by law Chevron shall not be liable for any loss or damage relating to, or any other consequences of, any unauthorized use, disclosure or loss of, or access to, your personal data.
For sites and applications to which you log in, it is your responsibility to ensure the security of your passwords (including the password to your device) and to not reveal this information to others. If you are sharing a device with anyone, you should always log out before leaving a website or application so that subsequent users will not be able to access your data.
Retention and Review of Personal Data
During the period that your Account is active, Chevron will retain your personal data and other information collected, unless you expressly request us to delete the information. Chevron may retain the information (or part of such information) after your Account is deactivated or deleted in the following circumstances (subject to applicable law):
(i) if we are required or allowed to retain such information by applicable law or regulation, or pursuant to any requirement of any government authority having jurisdiction over Chevron;
(ii) if there is an unresolved issue relating to your Account, such as an outstanding claim or outstanding credit or payment due;
(iii) for legitimate business purposes including fraud prevention, audit and preparation of business reports.
In some cases, you can review and correct personal data provided through the Application by going to the page on which you provided the data. You can also make a request to review and correct personal data collected via the Application or submit any inquiries or concerns you may have regarding personal data by sending an email.
To the extent required by law, we provide users with (i) reasonable access to the personal information they provide through the Sites, and (ii) the ability to review, correct and delete such personal information. To help protect your privacy, we may take steps to verify your identity before providing you access to your personal data. You can help us to keep data about you accurate by notifying us of any change to your mailing address, phone number or email address.
International Transfers of Personal Data
Personal data collected through the Application may be stored and processed in Malaysia, Singapore or the United States or any other country in which Chevron or its affiliates or related corporations or (in the case where we engage a service provider to perform certain services) its service providers maintain facilities, including countries which may not have data protection laws similar to the laws in the country from which you initially provided the information. When we transfer your information to other countries, we will protect that information to the extent required by law. By choosing to use the Application and to provide data through it, you consent to any such transfer of information outside of your country.
Links to Other Websites or Applications
The Application may contain links to other websites or applications, including those of other companies, professional and government organizations, and publications. These websites and applications operate independently from the Application, and we do not control and are not responsible for the content, security or privacy practices employed by other websites or applications. You should review the privacy statements of those websites and applications to determine how they protect and use personal data.
Questions about our Privacy Practices
If you have questions regarding this privacy statement or our handling of personal data, please contact us by email.
Changes to this Privacy Statement
Chevron may occasionally update this privacy statement. When we do, we will revise the "updated" date at the bottom of the privacy statement. You should revisit this page periodically to become aware of the most recent privacy terms; your use of the Application after such changes have been posted constitutes your agreement to such changes.