Privacy Policy

1. Information We Collect

We collect only the personal data necessary to provide our services, fulfill contractual obligations, or improve your experience. The types of information we may collect include:

• Personal Data: Full name, email address, phone number, company name, business address, job title, or other details you voluntarily provide when interacting with us.
• Transaction Data: Details related to petroleum transactions, such as product specifications, pricing, payment methods, and contractual terms, necessary to facilitate brokerage or mediation services.
• Website Usage Data: Non-personal data, including IP addresses, browser type, device information, operating system, pages visited, referral sources, and timestamps, collected via cookies or similar technologies.
• Communication Data: Information from inquiries, feedback, or support requests, including any documents or attachments you provide.

We collect data directly from you, through automated technologies, or from third parties with your consent or as permitted by law. Where required, we will obtain your explicit consent before processing personal data.

2. How We Use Your Information

We process your data for specific, legitimate purposes, including:

• Service Delivery: To facilitate petroleum transactions, execute contracts, process payments, and communicate with you about services.
• Website and Service Enhancement: To analyze usage trends, optimize website performance, and improve our services.
• Communication: To respond to inquiries, provide service updates, and, with your consent, send marketing communications about our services or industry developments.
• Legal Compliance: To comply with laws, regulations, and standards, including anti-money laundering (AML) and know-your-customer (KYC) requirements, and to protect our rights, property, or safety, or that of our clients or third parties.
• Internal Operations: For auditing, fraud prevention, and record-keeping.

We process data based on one or more of the following legal bases: (a) your consent, (b) contractual necessity, (c) legal obligations, or (d) our legitimate interests (e.g., improving services, ensuring security), provided these do not override your rights.

3. How We Protect Your Information

We implement industry-standard measures to safeguard your personal data:

• Technical Measures: Encryption (e.g., TLS/SSL), secure servers, firewalls, and regular security assessments.
• Access Controls: Access restricted to authorized personnel and third parties, bound by confidentiality agreements.
• Data Minimization: We collect and retain only necessary data.
• Breach Response: In the event of a data breach, we will notify affected individuals and authorities promptly, as required by law (e.g., within 72 hours under GDPR).

We audit our security practices to ensure compliance with global standards.

4. Sharing Your Information

We do not sell, rent, or trade your personal data. We may share your data only in these circumstances:

• Service Providers: With trusted third parties (e.g., payment processors, IT providers) under strict data protection agreements.
• Transaction Partners: With parties involved in petroleum transactions, only with your consent or as required for the transaction.
• Legal Obligations: When required by law, court order, or to protect our rights, property, or safety.
• Business Transfers: In mergers or acquisitions, with safeguards for data protection.
• With Your Consent: For other purposes, with your explicit permission.

Third parties receiving your data must comply with applicable laws.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: For website functionality, such as secure transactions.
• Analytics Cookies: For anonymized data collection (e.g., Google Analytics).
• Marketing Cookies: For personalized content, with your consent.
• Tracking Technologies: Web beacons to track engagement.

Manage cookie preferences via our consent tool or browser settings. Disabling cookies may impact functionality. See our Cookie Policy (to be linked if applicable).

6. Your Rights and Choices

Depending on your jurisdiction, you may have these rights:

• Access: Request a copy of your data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion, subject to legal retention requirements.
• Restriction: Limit processing in specific cases.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing for marketing or legitimate interests.
• Withdraw Consent: Revoke consent at any time.
• Non-Discrimination: No penalty for exercising rights.

To exercise these rights, contact info@whatafuel.com. We will respond within legal timeframes (e.g., 30 days under GDPR). You may also contact your local data protection authority.

Opt-Out: Unsubscribe from marketing emails via the "unsubscribe" link or by contacting us. Transactional communications cannot be opted out of while using our services.

7. International Data Transfers

We may transfer your data to countries outside your jurisdiction, ensuring compliance with laws through:

• Adequacy Decisions: For countries with adequate protection.
• Standard Contractual Clauses: For approved data safeguards.
• Additional Safeguards: Such as encryption or binding corporate rules.

Contact us for details on international transfers.

8. Third-Party Links

Our website may link to third-party sites not governed by this policy. Review their privacy policies before sharing data, as we are not responsible for their practices.

9. Data Retention

We retain data only as long as necessary:

• Transaction Data: Up to 7 years for tax or AML/KYC compliance.
• Marketing Data: Until you opt out.
• Website Usage Data: Up to 2 years for analytics.
• Communication Data: Up to 3 years or as required.

Data is securely deleted or anonymized when no longer needed.

10. Changes to This Privacy Policy

We may update this policy, posting changes here with a revised "Effective Date." Material changes will be notified via email or website notice. Review periodically.

11. Governing Law and Dispute Resolution

This policy is governed by the laws of Delaware, USA. Disputes will be resolved through negotiation or, if necessary, binding arbitration under the American Arbitration Association rules. You may also contact your local data protection authority.

12. Contact Us

For questions or to exercise your rights, contact our Data Protection Officer:

We aim to resolve concerns promptly. If unsatisfied, contact your local data protection authority.

13. Additional Provisions

• No Waiver: Failure to enforce any provision does not waive our rights.
• Severability: Invalid provisions do not affect the rest of the policy.
• Language: English version prevails; translations are for convenience only.

By using our website or services, you agree to this Privacy Policy, designed to ensure compliance and protect against legal risks globally.