Skip to main content

Privacy Statement

This General Privacy Statement is effective from October 25, 2018.

The Protection of your Personal Data is important to us.

Your privacy is important and we want you to understand our practices with respect to gathering and handling of Personal Data.

This Privacy Statement may be further complemented by other data privacy notices provided by ExxonMobil for specific uses of certain Personal Data.

This Privacy Statement, describes the Processing by ExxonMobil of Personal Data received from service providers through this Request for Quotation (“RFQ”), by ExxonMobil affiliates (collectively, “ExxonMobil”).

To the extent the Personal Data provided through a RFQ is handled by an ExxonMobil affiliate established in the EEA, we refer you to the EU Privacy Statement.


In this table we describe the categories of information that we gather from service providers who receive a RFQ and the purpose for which we use the information.

Purpose of Processing Categories of Personal Data How long we keep your Personal Data
Due diligence of third parties on the basis of information publicly available or provided by the third party via Prospective Business Associate Questionnaire (PBAQ). All Personal Data collected in the PBAQ, including, but not limited to name and business contact details, principal lines of business and length of time in each line of business, locations of business activities, citizenship, country of residence, details regarding whether the individual has been charged with or investigated for certain criminal offenses, shareholdership and/or ownership interest. 10 years
Due diligence of third parties in accordance with our legal or regulatory obligations and risk management procedures, including with respect to trade sanctions, through Thomson Reuters World-Check or other tools. Name, citizenship, contact details, country of residence; details regarding whether the individual is subject to trade sanctions regulations, e.g. has been designated a Specially Designated National (SDN) or is a citizen of a country subject to comprehensive sanctions. 10 years


We employ other companies and persons to perform functions on our behalf. They have access to Personal Data needed to perform their functions, but may not use it for other purposes.

Furthermore, we use third party screening tools to perform due diligence and other screening activities in accordance with our legal or regulatory obligations and risk management procedures, in particular Thomson Reuters World-Check and Thomson Reuters Enhanced Due Diligence tools, where permitted by law, to do integrity and advanced background checks that provide us with information that help us to identify and protect against any regulatory, and/or reputational risk.

For more detailed information about Thomson Reuters privacy practices with respect to gathering and handling of Personal Data within World-Check and EDD, please see the World-Check Privacy Statement and Thomson Reuters Privacy Statement.

Before any Personal Data is shared with service providers, we enter into a written agreement which requires them: (1) not to make any unauthorized further disclosures of the Personal Data; (2) to use the Personal Data only for the specified purposes and only according to the instructions received from ExxonMobil; (3) to retain the Personal Data only as long as necessary to carry out these purposes or to protect company interests (e.g. until the end of statute of limitations periods); and (4) to have in place adequate and appropriate security measures.

In some circumstances, ExxonMobil will have to disclose Personal Data to other third parties, including competent authorities, legal advisors and other business partners who process the Personal Data on their own behalf, for instance if such transfer is required by law or legal process, in order to defend ExxonMobil’s rights or to adequately handle individuals’ complaints and requests.


The relevant ExxonMobil affiliates may transfer some or all of the Personal Data to servers of ExxonMobil located worldwide and will make that Personal Data accessible to other ExxonMobil affiliates, some of which are located in third countries that may not be regarded as providing an adequate level of protection of the Personal Data, in accordance with applicable law.

By accepting this Data Privacy Notice you consent to the processing as described above accepting that such collection, storing or other processing may be conducted by a third party or may occur in a country that may not have been deemed by your country to provide adequate data privacy protection.


When living in a country with comprehensive data privacy laws, certain rights in relation to the information collected may apply, including:

  • the right to know and see what personal information is processed;
  • the right to have inaccurate personal information corrected or deleted;
  • the right to withdraw consent to the processing of the personal information.

Contact ExxonMobil’s Data Privacy Office to find out more about these rights, and how to exercise them.


ExxonMobil retains Personal Data to meet the purposes for which the data was collected or in order to ensure compliance with applicable law or to protect legitimate company interests (e.g. statute of limitations periods). ExxonMobil will keep the Personal data for the period stated in Section 1.


ExxonMobil is committed to protecting your Personal Data as described in this Privacy Statement and as required by applicable national laws. If you have any questions about this notice or about ExxonMobil’s handling of your Personal Data, or if you would like to request additional information on the Personal Data ExxonMobil holds about you or learn about and exercise your rights with respect to your Personal Data, you can contact: