Citgo - Good Rewards

Visa

April 2, 2012

HIGHLIGHTS

CITGO GOOD REWARDS is a great way for you to receive offers and messages from CITGO Petroleum Corporation through digital channels, including mobile, email, website and additional channels you choose as they become available (additional channels may be subject to applicable terms and conditions).

Program Name: CITGO GOOD REWARDS
Program Website: www.CITGOGoodRewards.com

Remember, if you change your mind and no longer want to receive offers from the CITGO GOOD REWARDS program, you can unenroll by doing one of the following:

When you unenroll from this Program, you may be presented with options to specifically identify your choices for unenrolling (e.g., you can unenroll from text messages, but continue to receive offers and messages by email). Please allow a reasonable time period to process your request.

GENERAL

CITGO GOOD REWARDS ("Program") is part of the Visa Offers Network. This Program is operated by Visa Inc. ("Visa") using the Visa Real-Time Messaging ("RTM") platform. CITGO Petroleum Corporation ("CITGO," "us," "we" or similar pronoun) utilizes the RTM platform to provide offers and messages to users that sign up for the CITGO Good Rewards Program. This Program is described in more detail in the Program Terms and Conditions (located at the Program Website). We highly value and respect the privacy of the personal information we obtain from you in connection with your participation in this Program, including your name, email address, mobile number and other information that can be used to individually identify you (collectively, "Personal Information") and we have created this privacy policy ("Privacy Policy") to inform you about how we collect, use and share your Personal Information in connection with this Program.

As more fully described in this Privacy Policy, we use information that we obtain from and about you in connection with this Program to enable you to participate in and take advantage of the Program features, for our own analysis, and to make this Program and our other programs and features more useful and interesting to you and other users.

This Program is not available to persons under the age of 18, and CITGO does not knowingly collect Personal Information from such minors. Only legal residents of the 50 United States (including the District of Columbia) may enroll in this Program. Those residing outside of the foregoing jurisdiction are not permitted to enroll in this Program.

Please note that when you enroll in this Program, you are providing your name, email address, ZIP code and mobile number to both CITGO and Visa and such Personal Information will be used by CITGO according to this privacy policy. You are also providing other personal information such as your Visa card number directly to Visa and such Personal Information will be used by Visa according to Visa's privacy policy for this Program (visit the Program Website website to view its privacy policy for this Program). We are not responsible for Visa's privacy policy or practices.

This Privacy Policy applies solely to this Program. This Privacy Policy applies to both information we may collect online and information we may collect through this Program. The CITGO.com privacy policy does not apply to this Program.

NOTICE

Personal Information CITGO collects

CITGO may collect Personal Information in a number of ways in connection with this Program, including, without limitation, as follows:

How CITGO may use your Personal Information

To whom CITGO discloses your information

CITGO may disclose to third-parties all categories of Personal Information that it collects as follows:

Automatically collected non-Personal Information and other aggregated information

In providing this Program, we may also collect certain information from your browser and personal computer that websites often collect, such as your IP address, your browser information (including browser type, capabilities and language), your operating system and the date and time you enrolled in this Program. We may also capture the country from which the visit came and the paths taken as you move from one website or webpage to another website or webpage (i.e., your "click stream" activity).

We may also collect, compile and maintain other non-Personal Information about this Program users, including, without limitation, enrollment and unenroll numbers, successfully delivered message metrics, and other types of information and data associated with Program users.

We may group some or all of this information into aggregate data in order to describe the use of this Program by our users to our existing or potential business partners, sponsors, advertisers or other third-parties, or in response to a government request. We may also group demographic information that we collect from this Program users into aggregate data for the same purposes. We reserve the right to use and share any such non-Personal Information with third-parties, for any lawful purpose.

CITGO does not typically associate such non-Personal Information with any individual. However, to the extent CITGO associates your Personal Information with non-Personal Information within our database, we will treat the associated information as Personal Information under this Privacy Policy. Except as noted in this Privacy Policy, we do not share this associated information with third-parties.

Browsing and the use of cookies, web beacons and other tracking technologies

CITGO uses cookies, web beacons and other web tracking technologies as part of providing this Program to you. Our use of this technology will be consistent with this policy. If you prefer, you can configure your browser to reject all cookies, or to notify you when a cookie is set. Each browser is different, so check the "Help" menu of your browser to learn how to change your cookie and privacy preferences. However, if you reject cookies, your enrollment in this Program may be impaired. The website may also use third-party web beacons to identify if you were directed to this Program from another third-party website.

CAPTCHA

The website may utilize CAPTCHA validation technology supplied through a third-party service provider (currently Google, but subject to change). We transfer your CAPTCHA response and other associated data to our third-party service provider to confirm the presence of a human user.

EMAIL/UNENROLL

When you email us a comment or question, we use your email address to thank you for your comment or reply to your question. We store your communication and our reply in case we correspond further. Beyond our initial reply, we will not use your email address to send you any unsolicited message or information, nor will we share it with, or sell it to, anyone else for such use, other than as specified in this Privacy Policy. Of course the foregoing does not apply if you participate in this Program through email.

When you enroll in this Program, we use your mobile phone number, email address and any other information you give us to provide you with the information or services you've requested until you unenroll from this Program or until we cease to offer this Program.

SOCIAL MEDIA

We may allow you to utilize one or more methods of communication to share and spread the message about this Program, which methods may include email and social networking platforms (collectively, "Social Media"). If you choose to use Social Media, you are subject to the privacy policy and other terms and conditions applicable to the particular Social Media.

If you utilize an available email feature, we will collect the name and email addresses of proposed recipients to send the email on your behalf. We may also use your name and email address in order to identify you as the initiator of the email. CITGO does not store the name or email address of any friend you designate (except in the case where the friend independently enrolls in this Program); the data is collected for the sole purpose of sending the email on your behalf. You are responsible for informing those you designate that emails may be sent to them from this Program on your behalf.

Some social networking platforms enable functionality that allows a user to receive and transmit data to the social networking platform through use of overlays or other technology. Although it appears the data is collected by us, the data is in fact collected directly by the social networking platform. If you decide to use this functionality, the data to be transmitted will be collected directly by the social networking platform, and we do not receive the information. Please note that the social networking platform is not subject to this Privacy Policy and the information will be collected, used and shared under that social networking platform's privacy policy and practices. Please pay particular attention to your account settings at any social networking platform you may utilize, as those settings will affect how and with whom your posts, information and other content are shared.

CHOICE

Program users can unenroll at anytime by following the instructions above.

ACCESS AND DATA RETENTION

If you unenroll from this Program, CITGO will take steps to prevent you from receiving additional messages from this Program. Notwithstanding the foregoing, CITGO will retain certain information (which may include Personal Information) provided to us indefinitely for the following or other lawful purposes:

Therefore, you should not expect that your Personal Information will always be completely removed from our Program databases in response to your requests. Your request to unenroll of this Program will only apply to information provided by you to CITGO in connection with this Program and will not apply to information you have provided to any other Personal Information associated with any other CITGO or Visa service, including those offered by the financial institution that issued your enrolled Visa card. In addition, please note that after your Personal Information is removed from this Program, there may be residual information that remains within one of our databases that may or may not contain your Personal Information, such as information that may be retained in back-up servers. CITGO will apply this Privacy Policy to information we maintain regarding former users of this Program.

SECURITY

The security of your Personal Information is very important to us, and we are committed to protecting the Personal Information we collect. While we cannot guarantee absolute security of your Personal Information, CITGO is committed to the security and confidentiality of your personal information. We utilize industry standard administrative, physical and technical security measures to protect your information. We occasionally review our security procedures as new technology and methodology evolves to ensure the security of information. We protect the transmission of information utilizing Secure Socket Layer (SSL) technology. Unfortunately, no transmissions or data available through the Internet or through mobile communications can be 100% secure and, accordingly, we cannot guarantee or warrant the security of any Personal Information or other information you provide to us.

PRIVACY POLICY UPDATES

This Privacy Policy was updated on the "Last Updated" date noted above. We may strive to find new ways to enhance this Program and CITGO reserves the right to change, modify, or amend this Privacy Policy from time to time to reflect changes in our privacy practices. You are encouraged to review this Privacy Policy periodically at the Program Website and to check the "Last Updated" date at the top of this Privacy Policy for the most recent version to inform yourself about how your Personal Information is collected, used and shared when you use this Program. To the fullest extent under applicable law, your use of this Program after the "Last Updated" date means you are subject to Privacy Policy then in effect.

CUSTOMER SERVICE

How to contact CITGO regarding your privacy questions

If you have any questions about this Privacy Policy, please feel free to email us at info@citgo.com.

©2012 CITGO Petroleum Corporation. All rights reserved.