VALERO'S LTD (EU) WEBSITE PRIVACY POLICY

Effective Date: August 11th, 2011

This website is operated by Valero Energy Ltd (a company incorporated in England & Wales (company number 145197), whose registered office is at 7th Floor, 11 Old Jewry, London, EC2R 8DU), an affiliate of Valero Energy Corporation (a U.S. company). Company and its affiliates (collectively “Company,” "we" or "our") are committed to protecting your privacy.

This Privacy Policy (the "Policy") describes the categories of personal data we collect on our websites, the purposes for which we use those data, your choices regarding the use of your data, our security measures, and how you can review and correct your data.

Your consent

By accessing this website and disclosing your personal information to us, you consent to the collection and use of your personal information described in this Policy.

What information do we collect about you?

We may collect information about you directly or indirectly from your use of our websites and online services.  In general, we collect information from you under the following circumstances:

User/Account Registration.  To use some of our online services, such as our online bill pay services or our Star Rewards loyalty program, we may ask users to register for an online account.  To register, we ask users to create a username and password, to supply us with their company name (if applicable) and details, name, email address, contact details, payment information, and, in connection with credit requests, and, where permitted by law, National Insurance Number or other national/tax identification number, and, if necessary, other information to verify your identity.

Purchases or Use of Online Services. In most instances, you can visit our websites without providing any personal data. However, on some pages, we may ask you for personal data to provide a service or carry out a transaction requested by you. The personal data that we collect may include:

• contact details, such as your name, title, company/organisation name, e-mail address, telephone and fax numbers, and physical address;
• information about your company and job position;
• your preferences with respect to e-mail marketing;
• financial information (including credit card numbers, bank or customer account information, and, in connection with credit requests, and, where permitted by law, National Insurance Number or other national/tax identification number)
• information such as your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technologies;
• your inquiries about and orders for our products and services, as well as information that assists us in identifying the best products and services for you;
• contest entry and event registration information; and
• feedback from you about our products and services (including our websites).

You are not required to provide this information. However, if you choose not to, we may not be able to provide you the requested product or service or complete your transaction.  We may combine this information with other personal data held by us about you.

• Name
• Gender
• Address
• E-mail address
• Phone and fax number
• Education and skills
• Resume or curriculum vitae
• Employment history
• Financial information
• Race or ethnic origin (where required or permitted by law)
• Health and medical data
• Criminal background check, where necessary and legally permitted

We may use this information throughout Company, including within its subsidiaries and affiliates worldwide, and its joint ventures for the purpose of employment consideration.  For more information about how we use this type of information, see the "Job Applicants" section, below.

Data Collected Automatically. We use cookies and other tracking technologies to automatically collect information about you when you visit one of our websites or use our online services, including IP address, browser type, operating system, date and time of visit, time spent on and/or logged in to website, pages viewed, links clicked, and other similar website activity.  If you are not a registered user and have not provided us with any personal data online, you may browse our websites anonymously. Please see the "Cookies and Web Beacons" section, below, for more information about how we automatically collect certain data.

If you have registered for any products or services from us online, have provided us with personal data online, or you are logged into your account, we may combine the personal data we have collected directly from you, with personal data we have collected from external or public sources and the information we have collected from you automatically.  Please see the "Use of Your Personal Data" section, below, for information about how we use your personal data.

Use of Your Personal Data

In general we use the personal data we collect about you for the following purposes:

·         To provide our services to you;

·         To fulfil or process your orders, requests and applications;

·         To communicate with you about your order, request or account and to respond to any inquiries or complaints submitted by you;

·         To provide troubleshooting and technical support and for other customer service purposes;

·         To display targeted advertisements to you, to provide you with customised offers and To better understand how users access and use our websites and services so that we can improve our websites and services, respond to user desires and preferences, and for other research or analysis purposes; and

http://www.texaco.co.uk/terms.asp

We will not use your personal data for purposes other than those described in this Policy, unless we receive your consent.  Notwithstanding anything else in this Policy, we may use any non-personally identifiable, de-identified or aggregate information about users for other secondary purposes, including marketing, advertising and research.

Disclosure of your Personal Data

Except as described below, personal data that you provide to Company via our websites will not be shared outside of Company, its subsidiaries and affiliates, and its joint ventures, without your consent.

Disclosure to service providers. Company contracts with other companies to provide services on our behalf, such as hosting websites, sending out information, processing transactions, and analysing our websites. We provide these companies with only those elements of your personal data they need to provide those services. These companies and their employees are prohibited from using those personal data for any other purposes.

Disclosure in connection with transactions. In connection with certain transactions, we may disclose some or all of your personal data to financial institutions, government entities, and shipping companies or postal services involved in fulfilling the transaction.

Disclosures in connection with acquisitions or divestitures. Circumstances may arise where for strategic or other business reasons Company decides to sell, buy, merge or otherwise reorganise particular businesses. Such a transaction may involve the disclosure of your personal data to prospective or actual purchasers, or receiving it from sellers. It is Company's practice to seek appropriate protection for information being disclosed in these types of transactions.

User Comments and Posts.  If you post content to our websites, we may disclose your username in order to label the comments or suggestions that you make as yours. However, we will not share your name, contact details or other personal data under these circumstances.  For more information see the "User Comments and Posts" section below.

Legal Process.  We may disclose personal data where we believe such disclosure if necessary to comply with the law, a judicial proceeding, court order, subpoena or other legal process.

Job Applicants

In connection with a job application or inquiry submitted to us online, we may use or share this information throughout Company, including within our subsidiaries and affiliates worldwide, for the purpose of employment consideration. We will only disclose such information to third parties who assist us in making employment decisions or verifying your application information, or to other third parties where you have given your consent.  For example, we may disclose this information to recruitment consultants, or to employment screening companies that help us verify the information you have provided to us.  These parties are subject to confidentiality obligations.   We will keep your application information for future consideration unless you direct us not to do so.

User Comments and Posts

Sometimes we allow our registered users to comment or provide other suggestions on a particular topic, in user restricted or public areas of our websites.  If you post content to our websites, we may disclose your username in order to label the comments or suggestions that you make as yours. We do not, however, share your name, contact details, or other personal data with other users.  You should be aware that any information you provide in these areas may be visible to and read, collected, used or disclosed by users or public visitors to the website.  We may also collect information about the content you post and may combine it with other personal data that we have collected about you.

Marketing

With your permission or as permitted by law, we may use your data to inform you of products or services available from us.  We give users the ability to opt-in to receiving communications from Company and its affiliates, as well as non-affiliated third parties, at the point where we request information about the user that may be used for marketing purposes.  The benefits of joining our mailing list include e-mail notification about enhanced service or product offerings that we believe may be of interest to you.  In addition, you may tell us to remove your contact information from our e-mail database and to not send you future offers and communications via e-mail, direct mail or telemarketing, by e-mailing us at ukwebmaster@valero.com.

Cookies and Web Beacons

When you visit our websites, our web server sends a cookie to your computer.  Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes.  There are two types of cookies: session-based and persistent-based cookies. In addition, we may permit certain third parties to place cookies through our website.

Session Cookies.  Session cookies exist only during an online session.  They disappear from your computer when you close your browser or turn off your computer. We use session cookies to uniquely identify you while you are logged in to the website, so that we can process your online transactions and keep you logged in as you move through our website.

Persistent cookies.  Persistent cookies remain on your computer after you have closed your browser or turned off your computer.  We use persistent cookies that only we, or our service providers, can read and use, to identify the fact that you are a Company customer or prior visitor, to store your preferences, and to personalise the content we display to you.  We are especially careful about the security and confidentiality of the information stored in persistent cookies.  For example, we do not store account numbers or passwords in persistent cookies.

Third Party Cookies. We may also engage third parties to track and analyse non-personally identifiable data about user and website activity.  We use the data collected by such third parties to help us administer and improve the quality of our websites and to analyse website usage.  We may also allow third parties to display advertising on our websites, and, in some instances to display targeted advertising to website visitors.  While we do not provide these third parties with your personal data, we may share demographic or aggregate information about you with them.  We do not have access to or control over these third party cookies, however, nor does this Privacy Policy cover such third parties' use of data.

Disabling Cookies.  You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies.  Most Internet browsers automatically accept cookies, but you can usually modify your browser settings to block them in the future. If you choose not to accept cookies, you may not be able to experience all of the features of our websites, and your existing settings (including stored user IDs and other preferences) will be lost.  In addition, you may go to http://www.networkadvertising.org/managing/opt_out.asp to opt-out of most third party tracking.

Company is committed to protecting the security of your personal data. We use a variety of security technologies and procedures to help protect your personal data from unauthorised access, use, or disclosure. For example, our networking systems include an industry standard firewall and systems that are both physically and logically protected (via secured locations and passwords); personal data is regularly backed-up and stored in a secure location; and when you place an order with us, view account information, or provide financial information, we protect the transmission of such data using Secure Socket Layer (SSL) encryption.

We also use reasonable efforts to maintain the accuracy and integrity of Personal Data and to update it as appropriate.  You can help us to keep your data accurate by notifying us of any change to your mailing address, phone number, or e-mail address.

Access to your Personal Data

You have the right to access or request a copy of the personal information held about you. If you would like a copy of some or all of the personal information we hold about you, please email ukwebmaster@valero.com or write to us at 7^th Floor, Old Jewry, London EC2R 8DU.  We may make a small charge for this service.

In some cases, you can review and correct personal data provided through our websites by going to the page on which you provided the data. In addition, you can always make a request to review and correct your personal data collected via our websites by sending an email to ukwebmaster@valero.com. We may take steps to verify your identity before providing you access to your personal data.

International Transfers of Personal Data

Company is headquartered in the United States and has affiliates and subsidiaries worldwide, including in Europe, Canada, the U.S. and Aruba.  Personal data collected on our websites may be stored and processed within the European Economic Area, the United States, or any other country in which Company or its subsidiaries, affiliates, or joint ventures maintain facilities.

By choosing to use our websites and to provide us data, you consent to any such transfer and storage of information outside of your country.

Safe Harbor Certification

With respect to the personal data Company receives from countries in the European Economic Area, Company has certified its adherence to the U.S. Department of Commerce US-EU Safe Harbor Principles.  You can find Company's Safe Harbor certification at https://safeharbor.export.gov/list.aspx.  For more information about these Safe Harbor Principles, please visit the U.S. Department of Commerce's website at http://www.export.gov/safeharbor.

Third-Party Links

Our websites may contain links to other websites, including those of other companies, professional and government organisations, and publications. While we try to link only to websites that share our high standards and respect for privacy, we do not control and are not responsible for the content, security, or privacy practices employed by other websites. You should review the privacy policies of If you have questions regarding this Policy or our handling of your personal data, please contact us at:

Changes to this Privacy Policye our high standards and respect for privacy, we do not control and are not responsible for the content, security, or privacy practices employed by other websites. You should review the privacy policies of those websites to determine how they protect and use your personal data.

Children

We do not knowingly collect personal data from any children under the age of 16.  If one of our websites is directed at children, we will include an additional privacy statement notice for children on that website.

Questions or Complaints

If you have questions regarding this Policy or our handling of your personal data, please contact us at:

Changes to this Privacy Policy