Mobile Apps Privacy Statement
Effective date: : July 2024
Introduction
Chevron Corporation and its wholly owned subsidiaries are committed to protecting your privacy. This statement explains the steps we take to protect personal data collected on our websites and through mobile apps. It describes what categories of personal data we collect, the purposes for which we use those data, your choices regarding use of personal data about you, our security measures, and how you can review and correct data about you. By accessing our websites and through our mobile apps, you consent to the data collection and use practices described in this privacy statement.
Data collection
Data collected directly from visitors. In most instances, you can visit our websites without providing any personal data. However, on some pages and through this mobile apps, we may ask you for personal data to provide a service or carry out a transaction you request. The personal data that we collect may include:
• Contact details, such as your name, title, company/organization name, email address, telephone and fax numbers, and physical address
• Information about your company and job position
• Your preferences with respect to email marketing
• Financial information, including credit card numbers, bank or customer account information and, in connection with credit requests, Social Security Number or other national/tax identification number
• Information such as your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technologies
• Your inquiries about and orders for our products and services, as well as information that assists us in identifying the best products and services for you
• Contest entry and event registration information
• Feedback from you about our products and services, including our websites
• User-preference information for app users
You are not required to provide this information. However, if you choose not to, we may not be able to provide you the requested service or complete your transaction.
Data collected by automated means. We collect certain data about all visitors to our websites, including what pages they view, the number of bytes transferred, the links they click, and other actions taken within our websites and collect similar data regarding user activity in, and information accessed or transmitted through the mobile apps. When you use the app, and on websites to which you logon, we may connect this information with your identity to determine your potential interests in our products and services. We may also use this information to improve our security measures. We also collect certain standard information that your browser sends to every website you visit, such as your Internet Protocol (IP) address, your browser type and capabilities and language, your operating system, the date and time you access the site, and the website from which you linked to our site.
Additionally, where such services are enabled on user devices, our mobile apps may use location services to locate users. You must activate the GPS locator within the app to purchase fuel through the app. Chevron may locate or record your geographic location and exact positioning.
Our use of cookies and web beacons
Cookies are small files that websites save to your hard disk or to your browser's memory. Our websites may use them to track the number of times you have visited the website, to track the number of visitors to the website, to determine and analyze visitors' use of our websites, to store data that you provide (such as your preferences), and to store technical information related to your interactions with our websites. We may also use session cookies, which are deleted when you close your browser, to store your user ID, to facilitate your movement around our websites (particularly in connection with information searches and order placement) and other information useful in administering the session. In some cases, we may use information collected through analytics cookies or advertising cookies to target advertising at website visitors or make advertising messages more relevant to you.
Our sites also may contain electronic images known as Web beacons—sometimes called single-pixel gifs—that allow us to count the number of users who have visited those pages. We may include Web beacons in promotional email messages or newsletters in order to determine whether messages have been opened and acted upon, including whether the recipient clicked on a link in the email or forwarded the email to another person.
Adjusting Browser Settings to Manage Cookies or Send “Do Not Track” Signals: Most Internet browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies or to notify you when a cookie is being placed on your computer. If you choose not to accept cookies, you may not be able to experience all of the features of our websites. Internet browsers also enable you to delete existing cookies, although this means that your existing settings (including stored user IDs and other preferences) will be lost. Some web browsers may also give you the ability to enable a “do not track” setting. This setting sends a signal to the websites you encounter while web browsing. This “do not track” signal is different from disabling certain forms of tracking by declining cookies in your browser settings, as browsers with the “do not track” setting enabled may still accept cookies. Chevron does not respond to web browser “do not track” signals at this time. If we do so in the future, we will describe how we do so in this Privacy Statement.
Restricting the Collection and Use of Google Analytics Data: On some of our websites, we also may utilize Google Analytics, a web analysis service provided by Google, to better understand your use of our websites. Google Analytics collects information such as how often users visit websites, what pages they visit and what other sites they used prior to visiting. Google may use the data collected on the websites to contextualize and personalize the ads delivered through its own advertising network. Google’s ability to use and share information collected by Google Analytics about your visits to the Websites is restricted by Google’s Analytics Terms of Use and Privacy Policy. Google offers an opt-out mechanism for the web available here.
Opting Out of Ad Network Interest-Based Advertising: While Chevron does not deliver third party online advertisements on our websites, we advertise our products and services on others' websites. Please familiarize yourself with those website operators' or network advertisers' privacy policies to understand their practices relating to advertising, including what type of information they may collect about your Internet usage. Individuals may opt-out of targeted advertising delivered by NAI or EDAA member ad networks by using tools provided visiting the following sites:
• Digital Advertising Alliance (DAA)
• Network Advertising Initiative (NAI)
• European Interactive Digital Advertising Alliance (EDAA)
Our use of personal data
We will use personal data only for the purposes set forth below.
Services and transactions. We use personal data to deliver services or execute transactions you request, such as providing information about Chevron products and services, processing orders, answering customer service requests, facilitating use of our websites, and so forth. In order to offer you a more consistent experience in interacting with Chevron, information collected by our websites may be combined with information we collect by other means.
Website and app improvement. We may use data about you to improve our websites (including our security measures) and related products or services, or to make our websites and apps easier to use by eliminating the need for you to repeatedly enter the same information, or by customizing our websites and apps to your particular preference or interests.
Marketing Communications. With your permission, we may use personal data to inform you of products or services available from Chevron. When collecting information that might be used to contact you about our products and services, we give you the opportunity to opt-out from receiving such communications. Moreover, each email communication we send includes an unsubscribe link allowing you to stop delivery of that type of communication. If you elect to unsubscribe, we will remove you from the relevant list within 10 business days.
Employment Applications. In connection with a job application or inquiry, you may provide us with data about yourself, including your educational background, résumé or curriculum vitae, and other information, including your ethnicity where required or permitted by law. We may use this information throughout Chevron, its subsidiaries and affiliates, and its joint ventures for the purpose of employment consideration. We will keep the information for future consideration unless you direct us not to do so.
Where we reference that we use your personal information in connection with a request, order, transaction, or agreement (or preparing for the same), or to provide you with services that you requested (such as a website), we do this because it is necessary for the performance of an agreement with you.
Where we reference that we use your personal information in relation to marketing, improvement or development of our products or services, for reasons of safety and security, or regulatory requirements other than in connection with your agreement or request, we do this on the basis of our or a third party's legitimate interests, or with your consent.
Disclosure of personal data
Except as described below, personal data that you provide to Chevron via our websites or app will not be shared outside of Chevron, its subsidiaries and affiliates and its joint ventures without your consent.
Disclosure to service providers. Chevron contracts with other companies to provide services on our behalf, such as hosting websites, sending out information, processing transactions, and analyzing our websites. We provide these companies with only those elements of personal data they need to deliver those services. These companies and their employees are prohibited from using those personal data for any other purposes.
Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of the personal data you provide to financial institutions, government entities and shipping companies or postal services involved in fulfilling the transaction.
Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons Chevron decides to sell, buy, merge or otherwise reorganize particular businesses. Such a transaction may involve the disclosure of personal data to prospective or actual purchasers or receiving it from sellers. Although it is Chevron's practice to seek protection for information in these types of transactions, we cannot guarantee that any entity receiving such data from Chevron in connection with one of these transactions will comply with all of the terms of this privacy statement.
Disclosure on collaborative websites. Some of our websites promote collaboration among registered users with respect to a particular area or topic. On those websites, we may share your username with other participants to label comments or suggestions that you make as yours. We do not, however, share your name, contact details, or other personal data with other users of those collaborative websites.
Disclosure for other reasons. We may disclose personal data if required to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property, or in urgent circumstances to protect the personal safety of any individual.
International transfers of personal data
We may transfer personal information that we collect through our websites and apps to, and store such information in, countries other than the country from which that information was initially collected or the countries from which individual site visitors may access these sites or use these apps. The countries, including the U.S. (and the other countries around the world where our individual subsidiaries, affiliates, suppliers, or business partners maintain facilities), to which we may transfer such information may have different data protection laws than the countries from which the information was initially collected or from which individual site visitors access our websites or are using an app.
By choosing to use our websites or applications and to submit personal data to us through them, you consent to the transfer of such information outside of your country.
To the extent required by applicable law, when we transfer your personal information to recipients in other countries, we will take measures to protect that information. For example, where required to protect personal information transferred between our subsidiaries or to our suppliers or other third parties, we implement Standard Contractual Clauses approved by the EU Commission and use similar contractual clauses to comply with similar requirements in other jurisdictions.
Personal data retention
To the extent permitted by applicable law, we retain personal information we obtain about you as long as (1) it is needed for the purposes for which we obtained it, in accordance with the provisions of this Privacy Policy or (2) we have another lawful basis, stated in this Privacy Policy or at the point of collection, for retaining that information beyond the period for which it is necessary to serve the original purpose for obtaining the personal information.
Security
Chevron is committed to protecting the security of personal data. While no security measure can guarantee against compromise, we use a variety of security technologies and procedures to help protect data from unauthorized access, use, or disclosure. For example, we store the personal data you provide on computer systems with limited access that are located in facilities to which access is limited. When you move around a site to which you have logged in, or from one site to another that uses the same login mechanism, we verify your identity by means of an encrypted cookie placed on your machine. When you place an order with us, view account information, or provide financial information, we protect the transmission of such data using Secure Socket Layer (SSL) encryption.
For sites to which you log in, it is your responsibility to ensure the security of your password and to not reveal this information to others. If you are sharing a computer with anyone, you should always log out before leaving a website so that subsequent users will not be able to access your data.
Links to other websites
Our websites or apps may contain links to other websites, including those of other companies, professional and government organizations, and publications. These websites operate independently from our Sites, and we do not control and are not responsible for the content, security or privacy practices employed by other websites. You should review the privacy statements of those websites to determine how they protect and use personal data.
Use of select third-party services through our mobile apps
Google Maps: Our mobile app incorporates a Google product called Google Maps API for Business or “Google Maps”. Google Maps will help end users like you locate Chevron and Texaco branded stations using our mobile apps and may provide other features and services through the mobile apps. The way it works, generally, is the mobile apps will send device Information and, in some instances, user content, including information about your location, to Google (including cached data). Google will then be able to display, through the mobile apps, nearby Chevron- and Texaco-branded gas stations that accept mobile payments and/or participate in the Chevron Texaco Rewards program. Google may use the information we provide through the mobile apps in various ways. To understand how Google may use that information, make sure you read Google’s Privacy Policy, which is a distinct policy and notice document from this Mobile Apps Privacy Statement.
If at any point in time you decide you do not wish to consent to any of the above Google terms, you must uninstall the mobile apps immediately. There is no other way to revoke or opt out of the Google Maps functionality and its associated terms, restrictions, and data privacy implications.
Third-Party Payment Solutions: To purchase fuel through our mobile apps, you may choose to add/enable authorized payment options within the apps. To pay for fuel using your active PayPal Inc. (“PayPal”) account you must link your PayPal account to your User Account. Upon linking your PayPal Account to your User Account, all PayPal transactions you make with or via the app at participating Chevron- and Texaco-branded stations will be charged to and/or processed through your PayPal account, subject to the terms and conditions of your agreements with PayPal. Chevron is not liable or responsible for any claims or disputes related to your PayPal account or PayPal’s use of your personal data. You are encouraged to review PayPal’s Privacy Policy for additional information regarding the potential processing of your personal data that may result from your enabling of this third-party payment functionality and using this third-party payment service through the mobile apps and the processing conditions to which you are providing your consent when you choose to enable this functionality and use these services through the apps. Similarly, if you choose to use Apple Pay or Google Pay to purchase fuel through our mobile apps, these transactions will be charged to and/or processed through your Apple Pay or Google Pay account, subject to the terms and conditions of your agreements with Apple Inc. (“Apple”) or Google Inc. (“Google), as applicable. Chevron is not liable or responsible for any claims or disputes related to your Apple Pay or Google Pay account or Apple’s or Google’s use of your personal data. You are encouraged to review Apple’s or Google’s Privacy Policy for additional information regarding the potential processing of your personal data that may result from your enabling of these third-party payment functionalities and using these third-party payment services through the mobile apps and the processing conditions to which you are providing your consent when you choose to enable this functionality and use these services through the apps.
Apple CarPlay, Apple Watch, Android Auto, or Wear OS device: When using the App via Apple CarPlay, Apple Watch, Android Auto, or Wear OS devices, you are encouraged to review Apple’s or Google’s Privacy Policy.
Checking Pay™: Checking Pay transaction is made using the customer's bank account through Buy It Mobility Networks Inc (BIM). When using the App via Checking Pay, you are encouraged to review Buy It Mobility Networks Inc BIM’s Privacy Policy .
Children
Our websites and apps are general audience platforms, although they contain information that may be of interest to children. However, Chevron does not seek through this site to gather personal data from or about persons 14 years or younger. If one of our websites is directed at children, we will include an additional privacy statement notice for children.
Reviewing personal data
In many cases, you can immediately review and correct personal data provided through our websites by going to the page on which you provided the data.
You may also submit requests to review and correct personal data collected through the Sites or submit any inquiries or concerns you may have regarding personal data by contacting our Global Privacy Office at the addresses provided in the How to Contact Us section of this Privacy Statement, including by sending an email.
To help protect your privacy, we take reasonable steps to verify your identity before granting access to your information. You can help us to keep data about you accurate by notifying us of any change to your mailing address, mobile phone number or email address.
Your rights
To the extent provided by the law of your jurisdiction, you may have the right to (1) access certain personal information we maintain about you; (2) request that we update, correct, amend, erase or restrict your personal information; or (3) exercise your right to data portability. Where provided by law, you may withdraw consent you previously provided to us or object at any time to the processing of your personal information on legitimate grounds relating to your particular situation, and we will apply your preferences going forward as appropriate.
To exercise these rights, please contact us via one of the means specified in the How to Contact Us section of this Privacy Statement.
To help protect your privacy, we take reasonable steps to verify your identity before granting access to your information.
In the event you consider our processing of your personal information not to be compliant with the applicable data protection laws, you can lodge a complaint with our Global Privacy Office by sending a letter or an email to the Global Privacy Office at the addresses provided in the How to Contact Us section of this Privacy Statement. Complaints that relate to our processing of personal information within the European Union or our compliance, more generally, with the European Union’s General Data Protection Regulation (“GDPR”) may be directed to the attention of our Data Privacy Officer for the European Region, Simon Owens, at the mail and email addresses provided for the Global Privacy Office. Depending on your location, you may also have the right to file a complaint with a government regulator if you are not satisfied with our response. The name and contact details of the Data Protection Authorities in the European Union can be found here.
California, Colorado, Connecticut, Utah, and Virginia residents seeking to exercise rights afforded to them under their respective privacy state laws may learn more about those rights and the contacts that may be used to submit requests to exercise those rights in our United States Supplemental Privacy Statement.
How to contact us
If you have questions regarding this privacy statement or our handling of personal data, please contact us by email, or by mail at:
Chevron Corporation
Attn. Global Privacy Office
5001 Executive Parkway, Suite 200
San Ramon, CA 94583
Changes to this privacy statement
Chevron may occasionally update this privacy statement. When we do, we will revise the “effective” date at the top of the privacy statement. You should revisit this page periodically to become aware of the most recent privacy terms; your use of the site after such changes have been posted constitutes your agreement to such changes.
Additional Privacy Disclosures
Our United States Supplemental Privacy Statement provides additional information regarding our collection and use of personal data relating to California, Colorado, Connecticut, Utah, and Virginia residents (through both online channels and offline channels), rights afforded to California residents under the respective privacy state laws, and contacts these residents may use in seeking to exercise those rights.