Member Offer: My Esso Card

51 texts received today. Does fiasco accurately describe the administration of this scheme?

Post reported, in the hope that someone at the Club can answer your question Andy

You will need to write to PK and formally request a copy of the information they hold about you, then request they delete it. They should confirm this has been done within one calendar month. If you continue to receive communication after you have requested your contact information is Deleted User, you can then make a formal complaint to the Information Commisioners Office who may then pursue legal action.

Anyone who genuinely is concerned about Pump King holding their debit card details and you wish to cease using their service, you should contact your bank and request the card registered with PK is blocked and ask for a new card to be issued. 

I did this today, then filmed a short time stamped video of me cutting up the Esso Card after I clearly filmed the card details prior to destroying it. This way, Pump King can’t claim my card has been used since this video has been recorded. 

The other worrying thing is I changed my card details over a month ago, 6 debits later and it is still being taken from the wrong account although it shows the 2nd card on the card details page !

I agree, that is very concerning.

GDPR Right to Erasure

What is the right to erasure?
Under Article 17 of the GDPR individuals have the right to have personal data erased. This is also known as the ‘right to be forgotten’. The right is not absolute and only applies in certain circumstances.

When does the right to erasure apply?
Individuals have the right to have their personal data erased if:

• the personal data is no longer necessary for the purpose which you originally collected or processed it for;
• you are relying on consent as your lawful basis for holding the data, and the individual withdraws their consent;
• you are relying on legitimate interests as your basis for processing, the individual objects to the processing of their data, and there is no overriding legitimate interest to continue this processing;
• you are processing the personal data for direct marketing purposes and the individual objects to that processing;
• you have processed the personal data unlawfully (ie in breach of the lawfulness requirement of the 1st principle);
• you have to do it to comply with a legal obligation; or
• you have processed the personal data to offer information society services to a child.

I too have been bombarded with text messages, every couple of seconds they come through. I have had to switch my phone off to stop them, which is not ideal. I too went onto their web site to cancel my account and found the same, couldn't delete my personal data. I have read a post from Club admin that this has now been sorted (text messages) but I am still getting them. Will be interesting to read their announcement Monday morning, I do hope it has been resolved. I contacted Pump-King via e-mail, but I'm still awaiting their reply.

Firstly I think that we all need the reassurance that our data has not been compromised.

Secondly we need to know the process that needs to be followed as per the GDPR legislation to have our details permanently removed from the Pump King organisation and all other third party organisations to which our details have been passed on by Pump King Ltd and we need the assurance that the process has been completed.

Thirdly according to Pump King T&Cs;

9.Amendments

9.1These Terms and Conditions can only be amended if Pk Fuel Limited so agrees in writing by posting a notice on its website and / or by email notification to the Cardholder. Pk Fuel Limited will notify the Cardholder of any changes to these Terms and Conditions with 15 days' such prior written notice

Has any one ever had notification that the T&Cs have changed?

Lastly reggrding third parties needs clarification;

10.Third Parties

10.1 These  Terms and Conditions are between Pk Fuel Limited and the Cardholder. No one other than the Cardholder and Pk Fuel Limited (and Pk Fuel Limited successors and permitted assignees) shall have any right to enforce any of these Terms and Conditions.

10.2 Pk Fuel Limited may transfer its rights and obligations under these Terms and Conditions to another organisation.  The Cardholder may only transfer their rights or obligations under these Terms and Conditions to another person with Pk Fuel Limited's prior written consent.

The above questions have been asked previously but PK Ltd and the CMC have avoided answering them.

of course you are right but i am afraid this is like flogging a dead horse

. . . and only applies in parts of the world that implement GDPR.

I wonder if anyone has yet been defrauded other than the occasional double-charging of a sale?

I would imagine those who've used the card will have their details retained for accounting purposes. Anyone who is worried about their debit card details itself being retained would just need to cancel with their bank and ask for a replacement. I am not inferring the transactions are unsafe.