Privacy Notice

Tankful is operated by Donncha O'Toole, a sole trader trading as Tankful, and is the controller for the Tankful website, alerts, supplier directory, quote request, order workflow, support, business enquiry, analytics, and supplier portal services. Data protection requests can be sent through the contact form or directly to [email protected].

Direct privacy contact: open a privacy or GDPR request. Postal contact: Donncha O'Toole, Tankful Data Protection Contact, Bellevue House Mews, Bellevue Demesne, Delgany, Co. Wicklow, Ireland.

The household Tankful iPhone app does not require an account for price comparison, use a third-party analytics SDK, or take payment. You can choose a county yourself or explicitly ask the app to use your location once to match you to an Irish county. Precise coordinates are not retained; only the county selection is kept for app functionality.

When you choose a county and order size, the app sends those selections to retrieve recent reference-price data and named oil supplier records. It keeps the last successful comparison, a local price alert, and a delivery-request draft on the device. After you save a price target, you may allow a repeating on-device notification that reminds you to open Tankful and check fresh prices. It does not claim the market crossed your target. These local saves do not send an email or text and do not create a quote, order, payment, or delivery.

If you separately sign in and allow remote notifications, Tankful stores an opaque installation identifier and an encrypted Apple notification token linked to your account. These support private price-alert, quote, delivery, and support updates. Notification text is deliberately limited; private details remain behind the signed-in app. Signing out revokes that installation, and invalid Apple tokens are disabled automatically.

If you choose the iOS share action, the system shares the selected county, litre amount, preferred window, and reference-only wording with the destination you select. Tankful does not automatically send that share or contact an oil supplier on your behalf.

If you ask to hear when Tankful launches in a country, we store your email, selected country and language, the consent and privacy notice versions, and the time you agreed. This permission is specific to that country launch and does not subscribe you to price alerts or general marketing. Submitting this form does not create an account, order, payment, or supplier enquiry. No email is sent by the current signup service.

We rely on your consent for this launch request. Save the private withdrawal link shown after signup; anyone with that link can withdraw the request. The server stores a hash of its secret, rather than the secret itself. You can also request removal at [email protected]. We keep an active request until it is withdrawn or removed. Withdrawal deletes the signup record, including the email. A separate pseudonymous consent record retains hashes, country, notice versions and timestamps to record withdrawal and prevent replay. These records remain personal data where they can be linked to you; their retention remains subject to review and your applicable data rights.

These coming-soon pages do not load optional analytics. The signup does not collect your address, telephone number, payment details, IP address or device details in the signup record. Necessary website hosting and security logs are covered by the other sections of this notice. Country pages include a translated summary of this purpose; this full notice is currently available in English.

With your separate consent, we record your interest in emails about Tankful supplier stores in your selected country. This is distinct from household launch updates, price alerts and general advertising. The current public form requires your email and business name; contact name, telephone, service region and website are optional. We also retain the country, language, consent/notice versions, timestamp and a hash of the private management-link secret. Email is unverified. Recording this request creates no supplier account, verification, order or payment, and the current service sends no email. Optional business contact details do not give separate permission for telephone marketing.

Withdraw this purpose using its private link shown after signup, or contact [email protected]. Anyone holding that link can withdraw it. Withdrawal removes the active email/business request, while a separate pseudonymous record retains hashes, country, versions and timestamps to record withdrawal and prevent replay. It may remain personal data. The existing consent/unsubscribe retention criterion below applies: while active and up to 24 months after withdrawal or expiry. This is not a promise of automatic deletion. Necessary security/replay records use the legitimate interests described in this policy. The scope-specific detailed notice is available at the Spanish prelaunch privacy notice.

We share data only where needed for the service. The providers that process personal data for us are:

• DigitalOcean, which hosts our servers and database.
• Cloudflare, which delivers and protects the website and forwards email sent to tankful.ie addresses.
• Resend, which sends our emails, including sign-in links, price alerts and delivery updates.
• Twilio, which sends text messages only where you ask to be contacted by text.
• Mixpanel, for analytics and masked session recordings, only if you accept analytics.
• Stripe, for card payments where a checkout or statement says they apply.
• Apple, if you sign in with Apple or turn on notifications in the Tankful iPhone app.
• Google, if you choose to sign in with Google.

We may also share data with professional advisers, insurers and regulators where needed, and with the oil suppliers involved in an enquiry or order.

For supplier-direct enquiries and any named supplier pilot order, the supplier is an independent controller for the fuel sale and delivery it handles. Tankful is an independent controller for its website, order workflow, support, and payment-facilitation activities where a checkout says they apply. Stripe acts as an independent controller for some payment and fraud processing and as a processor for some platform operations.

Some processors may process data outside Ireland or the European Economic Area, including the United Kingdom or United States. Where this happens, we rely on adequacy decisions, the European Commission Standard Contractual Clauses, transfer risk assessments, and supplementary security measures such as access controls and encryption where appropriate.

• Contact and support enquiries: normally up to 24 months after closure, longer if needed for a dispute.
• Quote requests and supplier referrals: normally up to 24 months, with operational logs retained as needed for audit and abuse prevention.
• Alerts, consent, unsubscribe, and post-trigger feedback records: while active and then up to 24 months after unsubscribe or expiry.
• Supplier portal authentication and action logs: normally up to 6 years where linked to orders, otherwise up to 24 months for security audit.
• Analytics event and masked session-recording data: normally up to 26 months unless a shorter Mixpanel project retention setting is configured.
• Controlled experiment assignment records: normally up to 12 months, using an opaque subject hash and assignment reference without contact or address fields.
• Security logs: normally 90 days to 12 months, longer where investigating abuse, fraud, or incidents.
• Public supplier price/source records: retained while relevant for price history, price-history review, audit, and market reporting.

Essential cookies and local storage support security, sessions, consent records, portal access, and fraud prevention. Optional analytics, including Mixpanel, starts only if you accept analytics. See the Cookie Notice for the tracker inventory and preference details.

If you ask the tank planner to email you on its suggested date, Tankful keeps your email, county, order size and that date. We email you once to confirm the address and once on the date, then send nothing more about it. Each email has a link to cancel. The request is a service communication, not marketing permission.

When you create a price alert, Tankful uses your email to send the confirmation and the alert service you requested. That service communication is separate from occasional marketing updates. You can optionally give a clear affirmative email-marketing permission on the alert form or later in your account; that permission is recorded separately and can be withdrawn in your account at any time.

After confirming an alert, you may optionally give Tankful a town or area for that alert. This helps us make later supplier options more relevant; it is not an address, Eircode, or marketing permission, and you can leave it blank.

The current public price-alert form does not collect a phone number or enable SMS. If a text-alert option is introduced, it will require separate, specific permission for SMS, a valid mobile destination, clear opt-out instructions, and a record of the consent and notice shown. A STOP message will revoke the SMS permission.

Subject to GDPR limits, you can request access, correction, erasure, restriction, objection, and portability. Where processing is based on consent, you can withdraw consent at any time without affecting earlier processing. You can object to legitimate-interests processing, including certain supplier-public-data processing, and we will assess the request against any overriding lawful grounds.

We aim to respond within one month. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie.

Tankful is intended for adults arranging household or business heating-oil services. Do not submit children's data unless it is genuinely needed for delivery safety or access instructions. Avoid including unnecessary tenant, neighbour, medical, security, or access-note detail.