If you decide to participate in the promotion/prize draw under our BPme Scan to Score Terms and Conditions, bp will collect your personal data in order to administer your entry to the prize draw.

If you are a winner, we will collect further necessary data from you so we can contact you about delivering your prize (for example, to arrange the Premier League match tickets or to send the shirt prize to your home address).

If you have accessibility requirements for attending a match, we will contact you about this and share any necessary information with the English Premier League ticketing portal and your chosen club so that they can accommodate your match and attendance requirements.

Participation in the promotion and prize draw is completely voluntary. If you do decide to participate, we rely on your consent to process the personal data you provide us, in accordance with this Privacy Statement. You can withdraw your consent at any time by contacting scantoscore@bp.com

bp service providers bp works with carefully selected service providers that carry out certain functions on our behalf, including administration of this promotion/prize draw. If you win a prize, your data will be passed onto bp’s chosen third-party fulfilment service providers so that they can administer your prize on our behalf. These service providers can only use your data in accordance with bp’s instructions and they must comply with the strict information security requirements that we have in place. English Premier League and your chosen club (for match ticket winners only) If you are a winner of premier league match tickets, your data will be shared with the Premier League’s ticket portal and your chosen club for the sole purpose of allocating your match tickets and arranging your attendance at the relevant match.

The Premier League will supply the chosen club with the details of the attendees of the relevant match for this purpose.

Please see the Premier League’s privacy policy for further information: https://www.premierleague.com/privacy-policy Details of how each club uses personal data are available here: Arsenal - https://www.arsenal.com/privacy-policy Aston Villa - https://www.avfc.co.uk/club/legal/privacy-policy/ Brentford FC - https://www.brentfordfc.com/website-privacy-policy/ Brighton - https://www.brightonandhovealbion.com/club/club/privacy-policy Burnley - https://www.burnleyfootballclub.com/club-policies Chelsea - https://www.chelseafc.com/en/footer/privacy-policy Crystal Palace - https://www.cpfc.co.uk/cpfc-privacy-policy/ Everton - https://www.evertonfc.com/content/privacy/efc-privacy-policy Leeds United - https://www.leedsunited.com/privacy-notice Leicester City - https://www.lcfc.com/terms Liverpool FC - https://www.liverpoolfc.com/legal/privacy-policy Manchester City - https://www.mancity.com/privacy-policy Manchester United - https://www.manutd.com/en/Help/Privacy-Policy Newcastle United - https://www.nufc.co.uk/privacy-policy/ Norwich City - https://www.canaries.co.uk/website-privacy-policy/ Southampton - https://www.southamptonfc.com/club/privacy-policy Tottenham Hotspur - https://www.tottenhamhotspur.com/information/privacy-policy/ Watford - https://www.watfordfc.com/privacy-policy West Ham United - https://www.whufc.com/privacy-policy Wolverhampton Wanderers - https://www.wolves.co.uk/club/policies/privacy-policy/ Liverpool and Brighton have their own separate ticketing arrangements and the Premier League will not store data in relation to the administration of match ticket prizes for those two clubs and bp will liaise directly with those clubs on your behalf to allocate the tickets. Other potential recipients We also reserve the right to disclose your personal information as required by law, or when disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order, request from a regulator or any other legal process served on bp. This includes our obligation to comply with the Advertising Standards Authority’s requirement to publish or make available on request the surname and county of prizewinners. This disclosure will be done in accordance with clause 38 of our T&Cs and will contain no information other than the surname and county of the winner. If you would prefer to withhold or limit your personal details from being published or made available, please contact: scantoscore@bp.com.

Your data shall be kept for as long as is necessary for bp to administer the promotion/prizes. Personal data relating to prize winners will be deleted by the end of 31st December 2022. Unsuccessful entrants’ personal data will be deleted 30 days after the expiry date of the promotion.

You have a legal right to ask us to provide you with access to any personal data you submitted to bp for this promotion. If you want access to your personal information or have any questions about how we use your data in connection with the promotion, please email us at scantoscore@bp.com. You are also entitled to request that any incomplete or inaccurate personal data which relates to you be corrected.

You also have a right to lodge a complaint with your national data protection supervisory authority (the Information Commissioner’s Office) in relation to bp’s processing of your data. However, in the first instance please consider using bp’s complaint resolution mechanism using the contact details above.

For further information about your rights in relation to data that we hold about you as a customer of the BPme Rewards customer loyalty program, please see https://www.bpmerewards.co.uk/privacy-statement/

This privacy statement was last updated on 14th February 2022.