Motorist, Loyalty customer, Shell App user

Where you choose not to provide us with information set out above for the purposes of using a Shell App or participating in the Shell Loyalty Programme the only consequence is that it will affect your ability to fully interact with the Shell App and/or to participate in the Shell Loyalty Programme.

Shell Eastern Petroleum (Pte) Ltd, a company registered in Singapore with registered number 196000089G whose registered office is at The Metropolis Tower 1, 9 North Buona Vista Drive #07-01 Singapore 138588 is responsible for processing your personal data.

We process your personal data for the purposes of:

• provide our products and deliver our services to you;
• managing relationships and marketing such as maintaining and promoting contact with you;
• account management including account verification (that is, ensuring that only you or someone you have authorized can access your account and information);
• customer service and development of our products and services;
• performance of and analysis of market surveys and marketing strategies;
• promotions and contests offered to Shell customers, including offering you digital rewards to recognise you as a valued customer; or
• detecting or preventing fraud if you use a mobile payment function to purchase Shell products (if available in your market);

or for a secondary purpose where it is closely related, such as:

• storing, deleting or anonymising your personal data;
• audits, investigations, dispute resolution or insurance purposes, litigation or defence of claims;
• statistical, historical or scientific research; or
• legal and/or regulatory compliance.

Communication and marketing - your choices

If you have consented to receive communications from Shell (or if you have previously purchased goods/and or services from us), you may receive offers that are tailored towards your preferences based on the information gathered about you from the various sources described above in order to provide you with better products and increasingly tailored services.

We may send you service updates and notifications without your advance consent only where such updates and/or notifications are necessary for the proper functioning of the Shell Apps or other services that you use.

You may receive pertinent offers and communications by different channels and you may update your subscription preferences via your personal profile settings anytime or use the unsubscribe functionality for the different digital channels.

Transaction security and preventing, detecting and investigating fraud

When you use a mobile payment application to purchase Shell products (if available in your market), you may be asked to provide additional personal details to complete the transaction. We may use the personal data you provide to prevent, detect and investigate fraud and to enforce the terms and conditions of the mobile payment application.

We may share some information with the service providers involved in mobile payments (such as PayPal), including but not limited to your IP address, device ID or unique identifier, loyalty card number for the purposes detailed above as well as for the purposes of collecting points, device type, geo-location information, connection information (for e.g. wi-fi) and mobile network information.

We aim to keep our information as accurate as possible. You can request:

• access to your personal data;
• correction or deletion of your personal data (but only where it is no longer required for a legitimate business purpose such as completing a retail transaction);
• that you no longer receive marketing communications;
• that the processing of your personal data is restricted;
• combining of your personal data from different sources to create a personal profile no longer takes place; and/or
• that you receive personal data that you have provided to Shell, in a structured, digital form to be transmitted to another party, if this is technically feasible.

To make any of these requests please go to your Shell account profile or please contact us at SGP-DPO@shell.com for the local Data Privacy Officer for Singapore or at www.shellescape.com or at SITI-MLM-Support@shell.com in this respect.

If you have any issues, queries or complaints regarding the processing of your personal data, please contact us at SGP-DPO@shell.com for the local Data Privacy Officer for Singapore, or at www.shellescape.com or by calling the Shell Escape customer hotline 18003722733 or at such number as updated by Shell from time to time, or SITI-MLM-Support@shell.com for further information or for submitting such requests.

You may also contact the Shell Group Chief Privacy Office at Shell International B.V. The Hague, The Netherlands - Trade Register No. 27155369 Correspondence: PO Box 162, 2501 AN, The Hague, at privacy-office-SI@shell.com.

If you are unsatisfied with the handling of your personal data by Shell, then you have the right to lodge a complaint to the Personal Data Protection Commission, whose address is 10 Pasir Panjang Road, #03-01 Mapletree Business City Singapore 117438 or the Dutch Data Protection Authority whose address is Prins Clauslaan 60, 2595 AJ The Hague, The Netherlands. Please visit https://autoriteitpersoonsgegevens.nl/en or www.pdpc.gov.sg for more information.

Shell uses cookies and similar technologies that collect and store information when you visit a Shell Website or use a Shell App. This is to enable Shell to identify your internet browser and collect data on your use of our website, which pages you visit, the duration of your visits and identify these when you return so that we improve your experience when visiting our website(s). You can control and manage your cookies preferences by adjusting your browser settings or using the Shell cookies preference tool on Shell Websites – for more information, please refer to the Shell Cookie Policy at https://www.shell.sg/cookie-policy.html

We have implemented technology and policies with the objective of protecting your privacy from unauthorised access and improper use. In particular, we may use encryption for some of our services, we apply authentication and verification process for access to Shell services and we regularly test, assess and evaluate the effectiveness of our security measures.

Your personal data are exclusively processed for the purposes referred to above and will only be shared on a strict need to know basis with:

• Other companies within the Shell group of companies, including to those which may be located outside of your location;
• With your consent, authorized third party companies in co-operation with Shell that may supply products and/or services to users of Shell Apps and Shell Loyalty Programmes;
• Authorized service providers involved in mobile payments (such as PayPal, Apple Wallet or Android Pay);
• Authorised agents, licensees, service providers, external auditors and/or subcontractors of Shell;
• A competent public authority, government, regulatory, supervisory, investigative or fiscal agency where it is necessary to comply with a legal or regulatory obligation to which the relevant Shell company/companies is subject to or as permitted by applicable law; or
• Any person to whom Shell proposes to transfer any of its rights and/or duties.

Transfers of your personal data to other countries

If you choose to interact with Shell through social media on a Shell administered social media page (‘Shell Social Media Page’) such as Facebook, Instagram, Twitter or LinkedIn, your personal data (such as your name, your profile picture and the fact that you are interested in Shell) will be visible to all visitors of your personal webpage depending on your privacy settings on the relevant social media platform, and will also be visible to Shell. You can delete any information that you share on these sites at any time through your relevant social media platform’s account. Shell does not track your activity across the different social media sites that you use. If you send a message to Shell via any messanger service on a social media platform, these messages are held for no longer than one month after receipt. Please contact Shell if you wish to make a request that you are unable to action yourself and which relates to a Shell Social Media Page - see the section above 'Your rights in relation to your personal data'.

Additionally and to the extent Shell is jointly responsible with a social media platform of a Shell Social Media Page, Shell will have access through the social media platform to aggregated data providing statistics and insights that help to understand the types of actions you take on Shell Social Media Pages. For more information on how your personal data are processed on those social media platforms, including any targeted advertising that you may receive, please refer to your privacy settings accessible through your relevant social media platform’s account.

Personal data processed by Shell in line with this Privacy Notice will be deleted or rendered anonymous (such that it will no longer be possible to identify you);

1. every 5 years where you remain a customer during this period;
2. without undue delay upon you requesting that your Shell account profile is deleted or to discontinue your participation in a Shell Loyalty Programme; or
3. after 3 years for all subscribed services from our last interaction with you (that is where you have not used our services for 3 years).

In relation to financial transactions (including those made through a Shell App), your personal data will be held for 10 years from the transaction.

In all cases information may be held for (a) a longer period of time where there is a legal or regulatory reason to do so (in which case it will be deleted once no longer required for the legal or regulatory purpose) or (b) a shorter period where the individual objects to the processing of their personal data and there is no longer a legitimate business purpose to retain it.

This Privacy Notice may be changed over time. You are advised to regularly review this Privacy Notice for possible changes. This Privacy Notice was last updated in August 2019.