Data Handling Statement

“UK Petroleum Co. Ltd is committed to GDPR compliance and is registered with the Information Commissioner’s Office (ICO).”  ICO Reference: ZC071467 

1. Introduction

UK Petroleum Co. Ltd (“we”, “our”, “us”) is committed to protecting the personal data of our business contacts, suppliers, partners, and individuals who may contact us on behalf of a company, in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This statement explains how we collect, store, use, and protect data submitted to us, including RFQs, supplier information, and business communications.

2. Data We Collect

We may collect the following types of information:

• Business contact details: company name, address, business registration, VAT number
  
  

• Personal contact details of individuals acting on behalf of businesses: name, email, phone number, job title
  
  

• RFQ submissions, quotations, and related commercial communications
  
  

• Any additional information voluntarily provided for business purposes
  
  

We do not collect sensitive personal data unless explicitly required and agreed upon.

3. Purpose of Data Processing

We process information solely for the following purposes:

1. Responding to RFQs and business inquiries
   
   

2. Supplier onboarding and management
   
   

3. Compliance with legal and regulatory obligations
   
   

4. Communication related to transactions, contracts, or business operations
   
   

We do not sell, share, or transfer personal data to third parties for marketing purposes.

4. Legal Basis

Our lawful bases for processing are:

• Contractual necessity – to fulfil RFQs, contracts, and supplier agreements
  
  

• Legal obligation – to comply with regulations, including anti-bribery and anti-slavery requirements
  
  

• Legitimate interests – to manage business operations efficiently while respecting privacy
  
  

5. Data Sharing

Data may be shared with:

• Internal team members on a strict “need-to-know” basis
  
  

• External service providers assisting with business operations, under confidentiality agreements
  
  

All third-party sharing is conducted in compliance with UK GDPR.

6. Data Security

We apply appropriate technical and organisational measures to protect information against:

• Unauthorised access, disclosure, or loss
  
  

• Accidental destruction or damage
  
  

• Cybersecurity threats
  
  

Access to information is limited to authorised personnel only.

7. Data Retention

Information is retained only as long as necessary for the purposes outlined above, or as required by law:

• Business and RFQ records: [e.g., 7 years]
  
  

• Supplier records: while active plus [e.g., 3 years]
  
  

After retention, data is securely deleted or anonymised.

8. Your Rights

Individuals acting on behalf of a business have the following rights:

• Access to their personal data
  
  

• Correction of inaccurate data
  
  

• Request deletion (“Right to be forgotten”)
  
  

• Restriction of processing
  
  

• Data portability
  
  

• Object to processing
  
  

Requests can be submitted to [Data Protection Contact Email].

9. Contact

For questions or to exercise your rights, contact:

Data Protection Officer

Nader Jebelli
UK Petroleum Co. Ltd
Email: info@ukpetroleum.com
Phone: +44 20 4628 1679 , +44 20 3355 5440

Note: By submitting RFQs or supplier information to UK Petroleum Co. Ltd, you acknowledge and consent to the processing of your business and personal contact information as described above.