Capitalised terms appearing in this document shall, unless defined herein, have the same meaning contained in the Nigeria Data Protection Regulation 2019.
NNPC Limited appreciates your interest in this Web site and other related or linked NNPC Limited sites (collectively, “Site”). Your privacy is important to us, and we want you to understand our practices with respect to the gathering and handling of your Personal Data. This Privacy Policy describes those practices.
NNPC Limited provides additional privacy notices for specific uses of certain Personal Data. For example, we provide additional notices to visitors to our facilities, to our suppliers, to job applicants, to users of specific mobile Apps, and to participants of our loyalty programs.
The relevant NNPC Limited affiliates will process the Personal Data in accordance with the privacy notices they provide for such specific uses. When these notices apply to you, we recommend that you read them carefully.
This Privacy Policy sets forth general Personal Data privacy principles that NNPC Limited follows with respect to Personal Data being processed in our business operations. Our data privacy policies may vary among the countries in which we operate to reflect local practices and legal requirements.
This Privacy Policy is addressed to:
- Visitors of the Site;
- Recipients of electronic or other communications which contain or refer to this Privacy Policy
Information from Children
NNPC Limited does not seek through the Site to gather Personal Data from or about minors (as this term is defined by applicable law), nor does NNPC Limited share the personal information of minors without affirmative authorization.
NNPC’s compliance with data protection Laws
NNPC Limited is committed to collecting and using personal data in a lawful manner. NNPC Limited will ensure that, when it collects or uses personal data, such collection or use is allowed under applicable data protection law, including, for example, the Nigerian Data Protection Regulation, EU General Data Protection Regulation (GDPR) or California Consumer Protection Act, where such laws govern.
Individuals may object to the processing of their personal data and we will consider such objections carefully where required by law. For more information about your rights with respect to how we process your personal data, please contact us via contactus@nnpcgroup.com
Collection of Personal Data
In this table we describe the categories of information that we gather via the Site and in connection with our business relationship with you. We also describe the purpose and legal basis, where applicable, for using and processing the information.
When NNPC Limited relies on its legitimate interest as a legal basis to process personal data, NNPC Limited will ensure that these interests do not disproportionately and adversely impact an individual’s rights and freedoms. When NNPC Limited relies on an individual’s consent as a legal basis to process personal data, individuals can withdraw their consent at any time. Visitors wishing to withdraw their consent should notify us at contactus@nnpcgroup.com and we will stop the processing of your personal data as soon as reasonably possible.
| Categories of personal data | Business Purpose of processing of personal data | Legal basis, where applicable, of processing | Categories of sources | Categories of third parties to whom information is shared, if applicable |
| Identifiers, like an IP address (the Internet address assigned to your computer from your Internet Service Provider), domain type, browser type (e.g. Firefox, Chrome or Internet Explorer), device type, and date and time of day. | To enable the Site to communicate with the visitor’s computer or mobile device during Site visits. | NNPC Limited’s legitimate business interest to improve the relevancy of content provided through the Site, and to ensure the quality of our services during Site visits. | We collect this information automatically. | We may share with technical developers and consultants hired to report web analytics. |
| Number of visits to the site; which parts of the Site visitors select, analytics to measure and observe user behavior, and device screen size. Contact details (names, addresses, e-mail addresses, and telephone numbers), personalization of the Site, completed order form, contest entry, survey feedback and other information you may provide us. | To improve and customize your experience on our Site. | NNPC Limited’s legitimate business interest to improve the relevancy of Site content and to ensure the quality of our services during Site visits. | We collect this information automatically, directly from you or from vendors who may be assisting us with our business purposes. | We may share this information with digital agency partners, order fulfillment companies, companies conducting satisfaction surveys on our behalf, companies performing customer service duties, companies collecting rating and review data, and consultants hired to report web analytics. |
| Contact details (names, address, e-mail addresses, and telephone numbers), personalization of the Site, completed order form, contest entry, survey feedback and other personal data you may provide us. | To provide the products and services you request and to bill you for products and services you request | NNPC Limited processes the personal data in order to conclude, execute, perform and administer the relevant agreement or order with you. | We collect this directly from you. | We may share this information with order fulfillment companies, companies conducting satisfaction surveys on our behalf, companies performing customer service duties, distributors and branded wholesalers. |
| Contact details (names, address, e-mail addresses, and telephone numbers), personalization of the Site, completed order form, contest entry, survey feedback and other personal data you may provide us. | To administer requests and feedback submitted through the Site. | By choosing to provide information to NNPC Limited, you accept that NNPC Limited processes the personal data you provided, in accordance with this Privacy Policy and with any relevant notices covering the specific use of the personal data. We may transmit your personal data to third parties if that is necessary for handling the request, in accordance with Section 5. | We collect this information automatically, directly from you or from vendors who may be assisting us with our business purposes. | We may share this information with order fulfillment companies, companies conducting satisfaction surveys on our behalf, companies performing customer service duties, companies collecting rating and review data, distributors and branded whole |
| Contact details (names, address, e-mail addresses, and telephone numbers), personalization of the Site, completed order form, contest entry, survey feedback and other personal data you may provide us. | To provide you the route to service stations. | By registering for routing services through the Site, you agree that we provide relevant route information and process your personal data for this purpose. If you do not wish for us to use your geolocation information for this purpose, you can decline our request to read your geolocation information; in that case, some of the services of our Site may not be available. By allowing us to use geolocation information, you agree that we provide the information to vendors who assist us in the provision of services through the Site | We collect this information automatically. | We share this information with companies providing locator functionality. |
| Contact details (names, address, e-mail addresses, and telephone numbers), personalization of the Site, completed order form, contest entry, survey feedback and other personal data you may provide us. | To improve our marketing and promotional efforts, to tell you about NNPC Limited, and about our products and services which we think may be of interest to you, including for instance products and services suggested on the basis of weather information associated with the geolocation of your computer or mobile device, and provide you with relevant marketing/promotional information at trade associations and industry group events and conferences. | NNPC Limited’s legitimate business interest to market and promote and improve its products, services, content and advertising. Geolocation information will be collected only with your prior explicit consent. By choosing to register through the Site, you accept that we keep you posted on communications from NNPC Limited such as news releases, alerts, RSS feeds and blog posts and that we process the personal data you have provided for this purpose. Regarding data collected automatically from social media postings, NNPC Limited will refrain from sending out individual privacy notices to each data subject for reasons of disproportionality. | We collect this information automatically, directly from you or from public social media postings. | We may share this information with vendors who may be assisting us with our business purposes and companies providing locator functionality. |
| Any of the personal data referred to in this notice, provided the information is appropriately pseudonymized or anonymized, as required under applicable law | For analytics and statistical purposes to help us design and administer the Site and to improve our products and services offering. | NNPC Limited’s legitimate business interest to ensure the relevance of the Site, to improve customer experience and NNPC Limited goods and services, and to promote our products and services. | We collect this information automatically, directly from you or from vendors who may be assisting us with our business purposes. | We may share this information with analytics vendors who may be assisting us with our business purposes |
We contract with other companies and persons to perform functions on our behalf. They have access to personal data needed to perform these business purposes.
For example, NNPC Limited may share your personal data with vendors in order to allow NNPC Limited to fulfill orders and make deliveries, to send postal mail, and e-mail, to manage customer lists, analyze data, provide marketing assistance, host websites, process card payments, and provide and improve customer service. Furthermore, communicating via the Internet and sending information, products, and services to you by other means necessarily involves your personal data passing through or being handled by third-parties.
These service providers have access to your personal data needed to perform our business purposes, but may not use it for other purposes.
Before any personal data is shared with service providers, we enter into a written agreement which requires them:
- not to make any unauthorized disclosures of the personal data;
- to use the personal data only for the specified purposes and only according to the instructions received from NNPC Limited;
- to retain the personal data only as long as necessary to protect company interests; and
- to have in place adequate and appropriate security measures.
In some circumstances, NNPC Limited will disclose personal data to vendors, legal advisors, NNPC Limited owned and affiliate fuel station operators, payment and loyalty card issuers, other contracted parties and competent authorities. These external parties process the personal data on their own behalf, for instance: if required by law, in order to defend NNPC Limited’s rights, or to handle individuals’ complaints and requests. We may also share your information in connection with a transfer of assets, or if we are otherwise involved in a merger or transfer. Only when permitted by applicable law and with your consent as required, will we distribute personal data to vendors, such as NNPC Limited distributors, for the purpose of allowing them to market their products and services to you. NNPC Limited does not, and will not, sell personal information to third parties.
NNPC Limited does permit third parties to collect information through our Sites (for example via cookies) in order to show advertisements for our products and services when the user visits other websites. Where required by law, we will seek your prior consent before such information is collected via our Sites. The third parties may also use the information for interest-based advertisement of other products and services. The advertisements are based on the users’ online activities over time and across different sites, services, and devices (“interest-based advertising”). Our cookie statements provide information about which third parties collect information via the Site for interest-based advertisement purposes. We recommend that you review the privacy policy of those third parties.
Transfers between affiliates
The relevant NNPC Limited affiliate who is the Data Controller may make personal data available to other NNPC Limited affiliates and may transfer some or all of the personal data to NNPC Limited servers located worldwide in accordance with applicable law.
The transfer of personal data from Nigeria to recipients located outside the country is subject to restrictions. NNPC Limited has taken steps so that personal data receives an adequate level of data protection at all NNPC Limited locations. These steps include NNPC Limited affiliates entering into inter affiliate agreements containing the NDPR “Standard Contracting Clauses”. The Standard Contracting Clauses will be approved by NITDA as offering adequate protection for transfers of personal data outside Nigeria.
Transfers to third parties When transferring personal data
NNPC Limited puts in place safeguards to ensure that the recipient adequately protects the personal data. With respect to the transfer of personal data from Nigeria to outside the country, NNPC Limited relies on
- NDPR “Standard Contracting Clauses”;
- contractual safeguards imposed on the recipient which is contracted by NNPC Limited affiliates outside of Nigeria; and
- protections available under local law for the recipient established in a country deemed adequate by NITDA. Where permitted, and as applicable, we will rely on the individual’s consent.
For more information about specific transfer mechanisms, including information on existing safeguards implemented by NNPC Limited, please contact us at contactus@nnpcgroup.com
Accuracy of Personal Data NNPC Limited endeavors to keep personal data that it collects accurate and complete. NNPC Limited relies on the individuals to maintain the accuracy and completeness of the personal data. Please inform NNPC Limited if your personal details change, including the context in which the personal data was provided, e.g. in connection with a specific product or service.
Individual’s Right
Applicable law may give you certain rights with respect to your personal data. In consumers may have the right to delete their data, to access and port personal data collected, used, or disclosed by NNPC Limited, and to exercise these rights freely from discrimination.
In order to submit a verifiable consumer request to exercise your right to know about, or delete, your personal information, please visit NNPC Limited’s privacy program landing page where you may submit your request via email, web form or via phone.
Under data privacy laws in Nigeria, applicable law gives consumers the right to:
- access their personal data; have inaccurate or incomplete personal data rectified;
- restrict the processing of their personal data, under certain circumstances;
- object to the processing operations, having regard to the given circumstances and for reasons related to their particular situation; or have personal data erased when such data is no longer necessary for the purposes for which it has been collected, in accordance with applicable law.
In some circumstances, you also have a right to request a portable extract of your personal data, which will allow you to reuse your personal data for your own purposes. You also have a right to lodge a complaint to the data protection supervisory authority in your country. For more information about the specific mechanisms available to exercise these rights, please contact us at contactus@nnpcgroup.com
To facilitate our efforts to address your request, please let us know the circumstances in which you initially provided NNPC Limited with your personal data, e.g. in connection with a specific product or service.
Do-Not-Track Signals and Similar Mechanisms
Some mobile web browsers transmit "do-not-track" signals. Because of differences in how web browsers incorporate and activate this feature, it is not always clear whether users intend for these signals to be transmitted, or whether they even are aware of them. We currently do not take action in response to these signals.
Automated Decision Making
- NNPC Limited does not use automated decision-making unless it is
necessary for entering into, or performance of, a contract between the Individual and NNPC Limited and its affiliates;
permitted or required by law; or
based on the Individual’s explicit consent. Automated decision-making refers to decisions that produce legal effects concerning an Individual or significantly affect the Individual and which are based solely on automated processing (i.e. no human intervention) of personal data
NNPC Limited shall implement suitable measures to safeguard the Individual’s rights and freedoms and legitimate interests when automated decision-making is used.
NNPC Limited retains personal data as long as necessary to meet the purposes for which the data was collected, to exercise its legal rights and to ensure compliance with applicable law.
NNPC Limited is committed to protecting your personal data as described in this Privacy Policy and as required by applicable laws. If you have any questions about this notice or our handling of your personal data, or if you would like additional information, please contact us at contactus@nnpcgroup.com We will ensure all data protection complaints are resolved in a timely manner as set out in the applicable Data Privacy laws and the Data Subject is informed when appropriate.
“NNPC Limited” and/or “NNPC Limited affiliates” mean
- NNPC Limited
- any company or partnership in which NNPC Limited or any parent of NNPC Limited now or hereafter, directly or indirectly owns or controls, more than fifty per cent (50%) of the ownership interest having the right to vote or appoint its directors or functional equivalents (“Affiliated Company”)
- any joint venture in which NNPC Limited, any parent of NNPC Limited or an Affiliated Company has day to day operational control.
We reserve the right to change this Privacy Policy at any time without notice. When we make material changes to this Privacy Policy, we will post the changes on this page and update the revision date at the top of the Privacy Policy. We encourage you to review our Privacy Policy regularly for updates.
