BAT WCA - Business relationships with BAT

Business relationships with BAT

Business relationships with BAT

Privacy Notice for our business contacts

This section of the Privacy Notice applies to you if you or your employer supplies goods or services to BAT, or you purchase goods or services from us. It also applies if you are a director or direct or indirect shareholder of an organisation which supplies or receives goods or services to or from BAT.

Here we tell you which BAT company is primarily responsible for your personal information, what we collect, why we collect it, how legally we can use it and for how long we keep it.

Which BAT company is primarily responsible for your personal information?

The BAT company listed below which has a business relationship with you, your employer, or the company of which you are a shareholder or director, will be primarily responsible for your personal information. For further information please contact BAT Data Privacy Officer .

What personal data do we hold about you and where does it come from?

At BAT, we need some information about you, such as your name, job title and contact details so we can work with you to manage the contract and relationship for the goods or services you supply to us, or we supply to you.  In addition, as part of managing the business relationship, we may be legally required to conduct ‘know your customer’, or similar compliance screenings on you or your company. In doing so we will use the information listed below. We obtain this information either directly from you or from your employer, or the company you are shareholder or director of. In the context of conducting compliance screenings, we will also check the personal information provided to us against public information.

How do we use your personal data, how do we legally do this and how long do we keep it for?

[For a general description of all the ways we use your personal information please click back to section 3 of the Privacy Notice. However, in respect of the way we lawfully can use your personal information in the context of the relationship that you have with us, please see below.

Why do we hold your information What type of information? How legally can we use your information? How long do we keep it for?
To contact you in order to manage the contract and business relationship with either you, your employer or the company you are a director or direct or indirect shareholder.
  • Name, contact information (e.g. email address, telephone number)
In order to perform our obligations under contract or take steps prior to entering into a contract. 7 years after the expiry of the business relationship or contract entered into by BAT.
To comply with all statutory and regulatory requirements within the jurisdictions within which we operate (including those relating to bribery and corruption, money laundering and sanctions) when engaging with third parties.
  • Name, contact information
  • In the case of sole traders: financial information, such as creditworthiness, bank account details, specimen signature; and
  • In the case of certain key individuals: KYC (know your customer) records, such as passport details, identity documentation, social security number, date and place of birth, nationality, relationships with public officials, or allegations of criminal conduct
  • personal information relating to criminal allegations, proceedings or convictions; and
    political opinions

To comply with Legal obligations to which BAT is subject.

12 years from the date that BAT ceases its relationship with the organization that you are employed by.

Please note that we may need to keep your information longer than the periods stated above. This could be because of the following reasons:

  • to potentially establish, bring or defend legal proceedings or to comply with a legal or regulatory requirement;
  • to be able to deal with external or internal audits.

When it is no longer necessary to retain your data, we will delete the personal information that we hold about you from our systems. After that time, we would only retain aggregate data (from which you cannot be identified) for analytical purposes.

BAT entities primarily responsible for your personal information

  • British-American Tobacco Nigeria Limited
  • British American Tobacco Marketing Nigeria Limited
  • British American Tobacco Ghana Limited
  • British American Tobacco RCI SARL
  • British American Tobacco Cameroon SA
  • British American Tobacco Mali SARL
  • British American Tobacco Benin SA
  • British American Tobacco Services Congo SARL
  • British American Tobacco Import SARL
  • Tobacco Marketing Company Burkina Faso