Texaco.co.uk | Privacy Policy

​

Va​​lero Global Privacy Notice

This Global Data Privacy Notice (“Notice") is intended to inform individuals about how Valero and its subsidiaries, affiliates, and related entities collect, use, disclose, retain and protect personal data across our worldwide operations (the “Valero Group"). This Notice is designed to comply with key legal requirements and to promote transparency and trust.

Please read this Notice carefully. If you have any questions, please contact us at: globalprivacy@valero.com.

Who Are We?

Valero is global organization made up of different legal entities - details of which can be found at www.valero.com. This Notice is issued on behalf of the Valero Group of companies, so when we mention "Valero", "we", "us" or "our" in this Notice we are referring to the relevant company in the Valero Group which controls your personal data – this includes:

Introductio​n

We value your privacy and are committed to protecting personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR) in the EEA, the UK GDPR and Data Protection Act 2018 in the UK, and relevant federal and state laws in the US such as the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), as well as Peru's Personal data Protection Law (Law No. 29733 and Supreme Decree No. 016-2024-JUS), Mexico's Federal Law for the Protection of Personal data Held by Private Parties (LFPDPPP), and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec's Act respecting the protection of personal information in the private sector.   Where processing is subject to UK or EU data protection laws, the relevant Valero entity will apply the additional measures needed to comply.

The data we collect

Personal data means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you, that you have provided to us, which we have grouped together as follows:

• Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth, gender and details of dependents, including children.
• Contact Data includes billing address, delivery address, email address and telephone numbers.
• Financial Data includes bank account and payment card details.
• Career and Educational Data includes details about current and past employers, education and training.
• Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
• Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
• Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, comments in forums, feedback and survey responses. 
• Usage Data includes information about how you use our website, products and services.
• Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences.
• Photographic Data includes images from events and for site security purposes.

We may occasionally need to collect Special Categories of personal data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, political opinions, trade union membership, information about your health, and genetic and biometric data). If this is the case, we will make this clear and ask for your explicit consent where required.

How we collect personal data

Depending on your interaction with us, we may obtain personal data from the following sources:

Direct interactions. You may give us your identity, contact and photographic data by filling in forms or by corresponding with us by post, phone, email, social media or otherwise. This includes personal data you provide when we undertake:

• to respond to your enquiry;
• to fulfil or process your orders, requests and applications;
• to communicate with you about your order, request or account;
• to respond to any enquiries or complaints submitted by you;
• to provide troubleshooting and technical support and for other customer service purposes;
• to better understand how a user may access and use our websites and services so that we can improve our websites and services, respond to user preferences, and for other research or analysis purposes;
• to send you marketing information that you have requested or as permitted by law;
• employee recruitment;
• managing access to our offices and other Valero Group locations;
• to assist, administer and manage any complaints, claims or damages;
• to run and administer corporate, local community, educational or careers events, including managing the sponsorship of events;
• to ensure the health and safety of employees and visitors at our sites;
• to prevent and detect crime and for the prosecution of offenders; and
• to investigate, prevent or take action regarding violations of this Notice or our Website Terms of Use.
  

Automated technologies or interactions. As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. Please see our Cookie Policy for further details.

Third parties or publicly available sources. We will receive personal data about you from various third parties and public sources as set out below:

• Technical Data from analytics providers.
• Contact and Transaction Data from providers of technical, payment and delivery services.
• Identity and Co​​​ntact Data from publicly available sources.

How we use your ​​personal data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into, or have entered into, with you.
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• Where we need to comply with a legal obligation.
• With your express consent.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we may use your personal data, and which legal basis we will rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below:

Who we s​hare your personal data with

We may need to share personal data with other organizations to ensure that we meet our legal obligations or where we need support in meeting your needs or our contractual obligations. We may also share information with other organizations where we consider it to be in the public interest or in the legitimate interest of ourselves or these other parties. These other parties are typically:

• business partners, suppliers and sub-contractors for the performance of any contract we enter into with them or you;
• members of our Valero Group and third-party suppliers and service providers for any of the purposes identified in the table above;
• third party suppliers and service providers to the extent they assist us providing the goods and services we offer;
• analytics and search engine providers that assist us in the improvement and optimization of our site and other selected third parties;
• other 3^rd party organizations who ask, encourage or collate feedback and any online views of your experiences with us to help us improve and optimize our services;
• banks, credit card companies, and relevant agencies who may share with third parties for the purpose of investigating and safeguarding against underage, fraudulent, criminal or suspicious activity or if we have reason to believe that you have undertaken such activity; and
• law enforcement or fraud prevention agencies, as well as our legal advisers, courts, applicable independent adjudication services and any other authorized bodies, for the purposes of investigating any actual or suspected criminal activity or other regulatory or legal matters.

We may also disclose your personal data to third parties in the following circumstances:

• in the event that we consider selling or buying any business or assets, in which case we will disclose your personal data to any prospective sellers or buyers of such business or assets;
• in the event of any insolvency situation (e.g. the administration or liquidation) of a data controller or any associated Valero Group entities;
• if we, or substantially all of our assets, are acquired by a third party, in which case personal data held by us may be one of the transferred assets;
• in order to enforce or apply our website terms of use;
• to protect the rights, property, or safety of us, our staff, our customers, or others. This includes exchanging information with other companies and organizations (including without limitation, the local police or other local law enforcement agencies) for the purposes of staff and customer safety, crime prevention, fraud protection and credit risk reduction;
• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation or regulatory requirements, or otherwise for the prevention or detection of fraud or crime.

Your rig​hts

EEA &​​​ UK

You have the following rights under the GDPR and UK GDPR, subject to certain exemptions:

• The right to access your personal data
• The right to rectify inaccurate or incomplete data
• The right to erase your personal data (“right to be forgotten")
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time (where applicable)
• The right to lodge a complaint with a supervisory authority

United States​​

Depending on your state of residence, you may have certain privacy rights regarding your personal data under laws such as the CCPA/CPRA, which may include:

• The right to know what categories of personal information, including sensitive personal data, that we collect, use, and disclose
• The right to know the categories of sources from which personal data, including sensitive personal data, is collected
• The right to know the business or commercial purpose for collecting, selling, or sharing personal data, including sensitive personal data
• The right to know the categories of third parties with whom we disclose personal data, including sensitive personal data, which may include a list of specific third parties, other than natural persons, to which we have disclosed personal data
  
• The right to request that we correct any inaccurate personal data about you (subject to exceptions as permitted by applicable law)
• The right to request that we confirm whether we are processing or have processed your personal data, and the categories of personal data we are processing or have processed
  
• The right to request deletion of your personal data
• The right to opt out of the sale or sharing of your personal data
• The right to non-discrimination for exercising your privacy rights
  
• The right to opt-out of profiling in furtherance of automated decisions that produce legal effects or similarly significant effects
• The right to revoke consent that you have previously given to us for processing personal data
• The right to appeal any action we take in response to your privacy request, as applicable based on your state of residence and subject to exceptions as permitted by applicable law

Canada

You have the following rights under applicable law, in some cases subject to certain conditions:

• The right to be informed of what personal information we collect, use, and disclose and for what purposes and give sufficient consent
• The right to access your personal data
• The right to obtain a copy of your personal data
• The right to rectify inaccurate or incomplete data
• The right to erase your personal data (“right to be forgotten")
• The right to data portability
• The right to withdraw consent at any time
• The right to lodge a complaint with a regulatory authority

Mexico

Under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), you have the right to exercise your ARCO rights.

Your ARCO rights include:

• The right to obtain information about how it is used and its current status
• The right to request the rectification of your personal data if it is inaccurate, outdated, or incomplete
• The right to request the cancellation (deletion) of your personal data when it is not being processed in accordance with applicable law
• The right to object to the processing of your personal data for specific purposes, particularly when such processing may cause harm
  
  

Peru

If you are located in Peru, you have the following rights under Law No. 29733 and its Regulation:

• Right of Access and Portability
• Right to Rectification
• Right to Cancellation
• Right to Opposition

To exercise your rights, please contact us at:

 globalprivacy@valero.com

Complaint​s

If you would like to make a complaint about our processing of your personal data you have the right to lodge a complaint with a relevant Supervisory or Regulatory Authority at any time. We would, however, appreciate the opportunity to deal with any concerns or complaints you may have in the first instance.

Where your interaction with our websites or services is subject to UK data protection law, including the Data (Use and Access) Act 2025, you are required to raise any data protection complaint directly with us in the first instance before escalating the matter to the UK Information Commissioner's Office (ICO).

Data protection complaints subject to UK data protection law may be submitted by emailing: privacylead@valero.com

Or

By post:

FAO: Global Data Privacy Lead

Valero Energy Ltd.

27^th Floor

1 Canada Square

Canary Wharf

London

E14 5AA

If you remain dissatisfied after receiving our final response, you may contact the Information Commissioner's Office (ICO) using the details set out in the table below.

​
International Transfers

From time to time, service providers, members of the Valero Group and organizations with whom we work with, may be located outside the country that you reside in.  We will always use every reasonable effort to ensure sufficient protections are in place to safeguard your personal data. We will also ensure that our service providers enter into compliant processing agreements with us to ensure that your personal data is processed in accordance with applicable data protection legislation.

Further information about the mechanisms we will apply for Europe can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_en.

Data Retention

We retain personal data only as long as necessary for the purposes set out in this Notice, and as required by law or regulation. Retention periods vary depending on the data type and purpose of processing.

Data Security

We implement appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication procedures
• Regular security assessments and audits
• Employee training on data protection

Children's Privacy

Our services are not intended for children under the age of 18 (or other age as required by law). We do not knowingly collect personal data from children without parental consent.

Changes to this Notice

We may update this Notice from time to time. The latest version will always be posted on our website, and where required, we will notify you of any significant changes.

Contact us

If you have any questions, complaints, or requests regarding your personal data or this Notice, please contact:

globalprivacy@valero.com

Version 1 –

7 July 2026​