Privacy Notice
Here’s what we do with your personal data, and what you can ask us to do with it at any time.
Last updated [TBC: date]
What does this notice cover?
It covers the personal data we collect through this website and through your supply account.
This notice explains what personal data we collect, why we collect it and who we share it with. It also sets out what you can ask us to do once we hold it.
Fields Energy Zambia Limited in Ndola is the controller for data collected in Zambia. It processes that data under the Zambia Data Protection Act 2021.
Fields Energy DMCC in Dubai is a separate controller. It processes data under the UAE Personal Data Protection Law.
What data do we collect?
1. What we collect
We collect the details you give us when you ask about supply or open an account, which are your name, employer, role, email address, telephone number, and the site or depot you are asking about.
2. What we do not collect
We do not collect special category data and we do not build profiles for advertising. This site sets no cookies and runs no analytics.
3. Why we collect it
We use the details you give us to answer enquiries, quote for supply, schedule deliveries and run accounts, and to meet the record-keeping obligations of a licensed Oil Marketing Company.
4. Legal basis
We rely on performance of a contract, or steps taken at your request before entering one; on our legitimate interest in operating and securing the business; and on compliance with a legal obligation where one applies.
5. Who we share it with
We share details with our transport and depot partners where that is necessary to complete a delivery, and with regulators where we are required to. We do not sell personal data.
6. Transfers between our entities
Where data moves between the Zambian and DMCC entities we transfer it under the safeguards each jurisdiction requires.
7. How long we keep it
We keep your account and delivery records for as long as the account requires, and no longer. If no account follows an enquiry, we keep your enquiry records only as long as we need them.
What rights do you have here?
8. Access
You can ask for a copy of the personal data we hold about you, and we will tell you what we hold and why we hold it.
9. Correction
You can ask us to correct data that is wrong or incomplete. We will correct it and, where we have shared it, tell the recipient.
10. Deletion
You can ask us to delete data where we are not required to keep it. Where a record must be retained under a licence or a tax obligation, we will tell you so.
11. Objection and restriction
You can object to processing based on our legitimate interest, and you can ask us to restrict processing while a question about accuracy is resolved.
12. Automated decisions
We do not make decisions about supply to your site by automated means alone.
13. How to exercise a right
Write to [email protected], and we’ll pass it to our data protection contact.
14. Complaints
If you are not satisfied with how we have handled your data, raise it with us first. You may then raise it with the supervisory authority in your jurisdiction.
Got a question about your personal data?
Email [email protected] or write to our registered address in Ndola, and we’ll reply to you directly.