Who we are
Bunkerme LLC FZCO, a company registered in the Dubai Multi Commodities Centre (DMCC), Dubai, United Arab Emirates ("Bunkerme", "we", "us", or "our"), is the controller responsible for the personal data described in this Policy. "Personal data" means information that identifies, or can reasonably be used to identify, an individual.
For individuals located in the European Economic Area (EEA) and the United Kingdom, Bunkerme is the "controller" of your personal data for the purposes of the EU and UK General Data Protection Regulation (GDPR).
This Policy applies to the Bunkerme website and platform (the "Services"). It does not apply to third-party websites or services we link to, which have their own privacy policies.
Information we collect
We collect the following categories of personal data:
- Information you provide — your name, job title, company, email address, phone number, and account credentials when you register, request a quote, apply as a supplier or trader, or contact us.
- Business and verification information — company details, vessel and fleet information, and documents we collect for know-your-customer (KYC) and anti-money-laundering (AML) checks.
- Transaction and usage information — quotes, orders, invoices, and records of how you use the platform.
- Technical information — IP address, device and browser type, pages viewed, and similar data collected automatically through cookies and similar technologies.
- Information from third parties — business databases, sanctions and credit-reference sources, and partners who help us verify identity and assess risk.
How we use your information
We use personal data to:
- provide, operate, secure, and improve the Services;
- create and manage your account and verify your identity;
- respond to your quote requests, enquiries, and support needs;
- process orders, deliveries, invoices, and payments under our commercial terms;
- carry out KYC, AML, sanctions, and fraud-prevention checks;
- send you service messages and, where permitted, relevant updates about the Services;
- analyse usage to understand and improve performance and security; and
- comply with our legal, regulatory, and contractual obligations.
Legal bases for processing
Where the GDPR applies (individuals in the EEA and the UK), we rely on the following legal bases under Article 6:
- performance of a contract — to create and manage your account and provide the Services you request;
- our legitimate interests — to operate, secure, and improve the Services and to prevent fraud, where these are not overridden by your rights and freedoms;
- compliance with a legal obligation — for example, KYC, AML, sanctions, tax, and accounting requirements; and
- your consent — for certain communications and non-essential cookies, which you can withdraw at any time.
For individuals outside the EEA and the UK, we process personal data on equivalent lawful grounds under applicable law, including the UAE Personal Data Protection Law.
International transfers
We operate globally from the United Arab Emirates, and we may transfer personal data to, and store it in, countries that may not provide the same level of protection as your own. Where we transfer personal data out of the EEA or the UK, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum), or transfers to countries recognised as providing an adequate level of protection. You can request details of these safeguards using the contact details below.
Data retention
We keep personal data only for as long as necessary for the purposes set out in this Policy, including to meet legal, tax, accounting, and regulatory requirements — for example, records we must retain for AML and transaction purposes. When it is no longer needed, we delete or anonymise it.
Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security.
Your rights
Subject to applicable law — including the GDPR for individuals in the EEA and the UK, and the UAE Personal Data Protection Law — you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data (the “right to be forgotten”) in certain circumstances;
- object to or request that we restrict certain processing;
- withdraw consent where we rely on it;
- request a copy of your data in a portable format; and
- lodge a complaint with your local data-protection supervisory authority.
To exercise any of these rights, contact us using the details below. We may need to verify your identity before we respond, and we will do so within the timeframes required by applicable law.
Changes to this policy
We may update this Policy from time to time. When we make changes, we will revise the "last updated" date shown above and, where appropriate, provide additional notice through the Services. Your continued use of the Services after the changes take effect means you accept the updated Policy.
Contact
If you have questions about this Policy or how we handle your personal data, contact us at legal@thebunkerme.com, or write to Bunkerme LLC FZCO, Data Protection, at our registered office in the DMCC, Dubai, United Arab Emirates. If you are in the EEA or the UK and have a concern we cannot resolve, you also have the right to contact your local data-protection supervisory authority.