European prelaunch privacy notice

Donncha O'Toole, a sole trader trading as Tankful, is the controller. Contact us by email or post using the details below.

Household launch updates: with your separate consent, we record your interest in emails about Tankful's launch in your chosen country. This does not subscribe you to price alerts or general advertising.

Supplier-page updates: with your separate consent, we record your interest in emails about Tankful supplier stores in your chosen country. This is distinct from household launch updates. Neither signup creates an account, supplier verification, order or payment. Signup is voluntary; the current recording service sends no email.

We store your email, selected country and language, consent and notice versions, date/time, and a hash of the private management-link secret. The email is unverified. The current supplier form requires a business name; contact name, phone, service region and website are optional. Those details stay with the supplier-interest request; they do not create a published seller or permission to contact by phone.

Withdraw each purpose separately using its private link shown after signup, or contact us. Anyone holding that link can withdraw the request; keep it private. Withdrawal deletes the active request and its email and any supplied business details. A separate withdrawal/replay record retains hashes, country, versions and timestamps. It is pseudonymous and may remain personal data; it is not guaranteed anonymous erasure. Withdrawal does not affect the lawfulness of earlier processing.

An active request remains until withdrawn or removed. The published general policy retains consent/unsubscribe records while active and then up to 24 months after unsubscribe or expiry; this includes the separate prelaunch withdrawal record. This describes the existing retention criterion, not an automatic deletion guarantee. Contact us about erasure or the applicable retention of your record.

The published policy identifies DigitalOcean for servers/database and Cloudflare for website delivery/security and forwarding email sent to Tankful addresses. Necessary providers process data to operate and protect these forms. Signup does not send your details to an oil supplier, Stripe or a messaging service. Contacting our email address uses the published email-forwarding service. Optional analytics are not loaded on these pages.

The published policy says some processors may process data outside the EEA, including the UK or US. It describes adequacy decisions, European Commission Standard Contractual Clauses, transfer risk assessments and additional security measures where appropriate. Contact us for information about applicable safeguards. This notice does not independently certify a provider's current configuration.

The signup record does not store address, payment, IP or device details; supplier contact details are recorded only if voluntarily supplied. Necessary hosting/security logs and transient IP-based rate limiting may still process technical data. The published security-log criterion is normally 90 days to 12 months, longer during investigations of abuse, fraud or incidents. This is not a guarantee that every current provider log is configured to those periods.

You may request access, correction, erasure, restriction, objection and portability where applicable. The signup legal basis is consent; necessary security and replay-prevention processing uses the legitimate interests in operating and protecting the service described in the general policy. We aim to respond to rights requests within one month. You may complain to a data-protection authority, including Spain's AEPD or the Irish Data Protection Commission.

Contact and complaint routes

Donncha O'Toole · Bellevue House Mews, Bellevue Demesne, Delgany, Co. Wicklow, Ireland

• Agencia Española de Protección de Datos (AEPD)
• Data Protection Commission (Ireland)
• Tankful · GI