Privacy Notice - Motorists- Single Sign On (‘SSO’)

This privacy notice provides information regarding the handling of your personal data by companies within the Shell group of companies in the United States of America (“Shell” or “we”) whether collected from you as:

1. a retail customer at Shell operated or branded retail stations;
   
2. a member of a loyalty program operated by Shell or by a third party/ies, such as Excentus Corporation and the Fuel Rewards® program (collectively, “Loyalty Program”);
   
3. a visitor to a Shell website (“Website” or “Shell Website”);
   
4. a user of the Shell Application or other Shell applications (“Shell Apps”); and/or
   
5. as a participant in a sweepstake, contest, promotion or competition offered by Shell, either alone or with a third party/ies (“Promotion”).
   

If you choose to create a Shell user account, a personal profile will be created for you to use and navigate across these Shell services (‘Single Sign On’).

Together with this notice, supplementary notices may contain further information to reflect local practices and applicable legal requirements and contains further contact details regarding the processing of personal data by Shell.

This privacy notice explains what personal data is processed by Shell, for which purposes, how long we hold the personal data for, how to access and update your personal data, the options you have regarding your personal data and where to go for further information.

For individuals who are Business Partners, Customers, Suppliers or Investors or who apply to work for a Shell company in the United States please refer to the relevant privacy notices at www.shell.us/privacy.html.

The Fuel Rewards® program is owned and operated by Excentus Corporation in the United States. Please see www.fuelrewards.com for complete Fuel Rewards® program details, Terms and Conditions, and the Excentus Privacy Policy.

Special Notice – if you are under 16 years old. Processing childrens’ personal data

Shell does not intentionally collect personal data of those under 16 years old. If you are under 16 years old please do not send us your personal data (for example, your name, address and email address). If you are under 16 years old and you wish to ask a question or use the Shell Website and/or a Shell App in anyway which requires you to submit your personal data, please get your parent or guardian to do so on your behalf.

Personal data is information that identifies you as an individual or relates to an identifiable individual. We collect information, including personal data about you, as a Shell customer, user of Shell Apps, member of a Loyalty Program, participant in a Promotion and/or visitor to a Shell website. This information may be either:

• Information that you provide to us – when creating a Shell account profile, we will ask for your name, e-mail address, username (if applicable) and password, and gender (so that we can address you properly but you do not have to provide us with this information), your contact preferences, and information necessary for answering any security questions. If you decide to become a member of a Loyalty Program, a user of Shell Apps, Shell Drive services, or mobile payments, we may ask you to provide further personal data necessary for the performance of such services and/or authentication such as type of vehicle, information on your driving preferences, date of birth (if collected), license plate number, vehicle location, communications preferences, and mobile number. If you choose to enter a Promotion we will gather information necessary to allow you to participate and to award you with any reward if confirmed, and to provide you marketing offers if you have agreed to receive these as part of your participation in a Promotion.
• Information that we obtain through your purchase and use of Shell branded goods and/or services - we will collect information about how and where you use or purchase Shell branded services and products. Such information may include electronic device information, credit card information, any discounts applied to your purchases, IP addresses, log information, browser type, and preferences, location information, online identifiers to enable ‘cookies’ and similar technologies. Your purchase history includes data regarding (i) specific products you buy, (ii) the total amount of your purchases per transaction, (iii) the time and place of the purchases you make, (iv) the payment method, the type of card used, and anonymized or masked credit or debit card numbers, including payment methods embedded in the App (such as mobile payment option), (v) whether you are a member of a Loyalty Program. 
• If you are a member of a Loyalty Program and/or Shell Drive, we will collect information about your participation in these programs - this includes data regarding (i) the type and description of the award you have chosen, (ii) the awards you have chosen, (iii) the amount of points or cents per gallon you have redeemed, (iv) the frequency and time of redemption of your awards, and (v) delivery method used to deliver your award (if any). If you are a user of Shell Drive, we will collect your recorded journeys, including your vehicle co-ordinates, speed and acceleration, comparing this against other users (if you have consented to the collection of such information, including your location).

The personal data covered by this privacy notice is processed:

• with your explicit consent;
• where it is necessary to conclude a transaction with you (such as payment information);
• where it is necessary for Shell to comply with a legal obligation; or
  
• for legitimate interests of Shell and Shell branded stations/wholesalers, such as for marketing and promotional purposes, for providing you with offers tailored to your preferences, for the purposes of detecting and investigating fraud, and/or responding to security threats.
  

Where the processing is based on consent, you have the right to withdraw your consent at any time. This will not affect the validity of the processing prior to the withdrawal of consent. Where you choose not to provide us with information set out above for the purposes of using a Shell App or participating in a Loyalty Program, this may affect your ability to fully interact with the Shell App and/or to participate in a Loyalty Program.

Where we provide you with marketing or promotional offers you can opt out of receiving such offers at any time. For more information, see “My data” below.

Shell Oil Company, a Delaware corporation having offices at 150 N. Dairy Ashford, Houston, Texas, 77079, USA is responsible for processing your personal data on behalf of itself and the relevant Shell affiliates within the Shell group of companies.

Shell processes your personal data for the purposes of:

• providing you the products and services that you requested;
• maintaining and promoting contact and our relationship with you;
• sending administrative information or notices to you, such as changes to our terms, conditions and policies;
  
• account management including account verification (that is, ensuring that only you or someone you have authorized can access your account and information);
• customer service and development;
• performance and analysis of market surveys and marketing strategies;
• marketing, promotions, and contests offered to Shell customers, including offering you digital rewards to recognise you as a valued customer;
  
• detecting or preventing fraud if you use a mobile payment function to purchase Shell products (if available in your market);
• data analysis, for example, understanding which products and services are of most interest to our users; and
• audits, to verify that our internal processes function as intended and are compliant with legal, regulatory or contractual requirements; and
• providing you any information required by law;

Consistent with your choices, you may receive offers that are tailored towards your preferences based on your use of Shell services, your purchase history, your participation in promotions, surveys, a Loyalty Program, and your use of Shell websites, Apps and other digital channels as well as other data that you have provided to Shell.

We may send service updates and notifications to existing users of Shell Apps or other services to update you about any relevant changes or to provide you with any notifications in connection with your use of the Shell Apps (including for the proper functioning of the Shell Apps) or other services.

You may receive pertinent offers and communications by different channels and you may update your preferences or unsubscribe as described under “My data” below.

When you use a mobile payment App to purchase Shell products (if available in your market), you may be asked to provide additional personal details to complete the transaction. We may use the personal data you provide to prevent, detect and investigate fraud, and to enforce the terms and conditions of the mobile payment App.

We may share information with service providers involved in mobile payments (such as P97, ChasePay, PayPal), including but not limited to your IP address, device ID, or unique identifier, loyalty card number for the purposes detailed above as well as for the purposes of collecting awards, device type, geo-location information, connection information (for e.g. wi-fi), and mobile network information.

We may process the information that you have provided to Shell as well as the information that we obtain through your purchase or use of Shell products and services to offer you digital awards and rewards to recognise you as our valued customer. Such electronic badges may be assigned to users of Shell Apps as with regard to their use of the Shell Apps, purchasing history, expressed interests in Shell products and services, and use of Shell Drive.

You can choose to opt-out from such communication by opting-out from the Badges functionality through the settings in the Shell Apps.

We aim to keep our information as accurate as possible. If you would like to opt out of marketing communications, request access to, correction or deletion of your personal data, or request that the processing of your personal data be restricted, please either-

• follow the instructions in applicable communication;
  
• login to your Shell account profile to change your data or communication preferences;
  
• email shellcustomercare@shell.com; or
  
• call +1 888-467-4355.
  

We will respond to your request consistent with applicable law.

If you have any issues, queries, or complaints regarding the processing of your personal data, please contact us at shellcustomercare@shell.com. You may also contact the Shell Group Chief Privacy Office at Shell International B.V. The Hague, The Netherlands - Trade Register No. 27155369 Correspondence: PO Box 162, 2501 AN, The Hague at privacy-office-SI@shell.com.

If you are unsatisfied with the handling of your personal data by Shell then you can lodge a complaint with your local data protection authority or with the Dutch Data Protection Authority as the lead supervisory authority for the Shell group of companies whose address is Prins Clauslaan 60, 2595 AJ The Hague, Netherlands. Please visit https://autoriteitpersoonsgegevens.nl/en

 for more information.

Shell uses cookies and similar technologies that collect and store information when you visit a Shell website or use a Shell App. This is to enable Shell to identify your internet browser and collect data on your use of our website, which pages you visit, the duration of your visits, and identify these when you return so that we improve your experience when visiting our website(s). You can control and set your cookies preferences by setting your browser settings – for more information, please refer to the Shell Cookie Policy at http://www.shell.com/cookie-policy.html

.

Information collected by cookies and similar technologies does not reveal your specific identity or relate to an identifiable individual. It is therefore not personal data. If we are required to treat this information as personal data, then we may use and disclose it for the purposes for which we use and disclose personal data as detailed in this Privacy Notice.

From time to time we may collect personal information about a user’s online activities over time and across third-party websites on the Internet, subject to your preferences and web browser “do not track” choices.

We have implemented technology and policies with the objective of protecting your personal data from unauthorised access and improper use. In particular, we may use encryption, we apply authentication and verification process for access to Shell services, and we regularly test, assess and evaluate the effectiveness of our security measures. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Who can I contact if I have a query, concern or complaint?” section above.

Your personal data may be shared:

• With other companies within the Shell group of companies;
• With authorized service providers involved in mobile payments (such as Chase Pay, PayPal, P97), apps, or a Loyalty Program
  
• With authorised agents, wholesalers, licensees, professional advisors, service providers and/or contractors of Shell (including third party operators for Shell branded retail locations);
• With your consent, with authorized third party companies in co-operation with Shell that may supply products and/or services to users of Shell Apps and a Loyalty Program
• With a competent public authority, government, law enforcement, regulatory or fiscal agency with jurisdiction over the relevant Shell company/companies, or as permitted by relevant state and/or federal law;
  
• As necessary or appropriate to enforce our terms and conditions, and to protect our rights, privacy, safety or property, and/or that of our affiliates, you or others; and
• With any person to whom Shell proposes to transfer any of its rights and/or duties; including in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets or stock.

We do not share your personal data with third parties for the purposes of direct marketing by them to you unless you provide your consent.

Where the personal data has been transferred to companies within the Shell Group and/or to authorized third parties located outside of the United States of America we take organizational, contractual, and legal measures to ensure that your personal data is exclusively processed for the purposes mentioned above and that adequate levels of protection have been implemented to safeguard your personal data. These measures include Binding Corporate Rules for transfers among the Shell Group. You can find a copy of these at www.shell.com/privacy.html

.

If you choose to interact with Shell services such as our Website, App or content through social media such as LinkedIn, Facebook, Instagram, and/or Twitter, your personal data (such as your name and the fact that you are interested in Shell) will also be visible to all the visitors of your personal webpage on LinkedIn, Facebook, Instagram, and/or Twitter, according to your privacy settings on the social media services. Shell is not responsible for the processing of such personal data or the privacy policy of such social media websites.

When you communicate with us through social media (for example, when you post a comment, upload media, send a personal message or become a fan of us by clicking the "Like" button, we may receive personal data about you (such as your (user) name, profile photo, your hometown, your email address and your gender). We will use the data received from social media in accordance with this Privacy Policy.

We retain personal data for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. Subject to any supplementary notices which provide otherwise, personal data processed by Shell in line with this Privacy Notice will be deleted or rendered anonymous (such that it will no longer be possible to identify you) in Shell systems;

1. without undue delay upon you requesting that your Shell account profile is deleted or requesting to discontinue your participation in a Loyalty Program; OR
   
2. within 3 years for all subscribed services after our last interaction with you or your last participation in a Promotion.
   

In relation to financial transactions (including that made through a Shell App), your personal data will be held for 10 years from the transaction.

In all cases information may be held for a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for that purpose).

This Privacy Notice may be changed over time. Any changes will become effective when we post the revised Privacy Notice on https://www.shell.us/. This Privacy Notice was last updated on Nov 14, 2018.