Effective: January 1, 2020
Last Update: August 27, 2025

INTRODUCTION

Devon Energy Corporation, together with its affiliates and subsidiaries (“Devon,” “we,” “us,” or “our”), is committed to protecting the confidentiality, integrity, and security of your personal information (“Personal Information”). This Privacy Policy explains how we collect, use, disclose, and safeguard Personal Information obtained through our primary website (devonenergy.com), our investor relations platform (https://investors.devonenergy.com), any other online services or plat-forms operated by or on behalf of Devon that link to this Privacy Policy (collectively, the “Sites”), and in the course of our business operations. For the purposes of this Privacy Policy, “you” and “your” refer to any user of our Sites or services, including interest owners, website visitors, job applicants, investors, or any other individuals whose information we collect. Our Sites provide information about the company, investor relations, career opportunities, and resources for submitting inquiries and accessing materials related to Devon’s operations.

By accessing our Sites or providing Personal Information to us, you consent to the practices described in this Privacy Policy.

DATA COLLECTION

Information You Provide Directly
You may visit our Sites without submitting Personal Information. However, we may request Personal Information to provide services or process transactions you request, both online and offline (for example, at events, by phone, or via mail). Personal Information we collect may include, but is not limited to:

  • Identifiers (e.g., name, IP address, cookies)
  • Contact details (e.g., email address, phone number, physical address)
  • Biographical, demographic, and professional information (e.g., date of birth, gender, job title)
  • Nationality and country of residence (for regulatory compliance)
  • Division orders, leases, inquiries, and documents related to ownership interests and revenue distributions
  • Internet activity data (e.g., device information, browsing actions, usage patterns)
  • Location data (e.g., IP-derived location, geolocation with notice and consent)
  • Sensitive personal data (e.g., precise geolocation, racial or ethnic origin, health data), which will only be processed with your explicit consent where required by law

Providing Personal Information is voluntary, but withholding it may limit your ability to use certain services or complete transactions.

Information Collected Automatically
We collect certain information automatically when you visit our Sites, such as:

  • Pages accessed, links clicked, and actions taken
  • Device and standard browser information (e.g., IP address, browser type, operating system, date/time of access, referring website)
  • Unique internal identification numbers for payment recipients (not linked to Personal Information)
  • Location information, such as country from which you are accessing the services
  • Information gathered through cookies and similar technologies, such as interactions with website features and embedded content, as well as navigation paths and usage patterns

This information helps us improve website functionality, security, and user experience, and to comply with legal and regulatory obligations (e.g., tax reporting).

Social Media and Advertising Data
When you interact with us via social media or third-party platforms, we may receive Personal Information such as your username, profile picture, and contact details. We also use cookies and similar technologies for advertising and analytics purposes. You may manage your cookie preferences through your browser or device settings or our cookie management tool.

Cookies
When you visit our Sites, we use cookies to enhance functionality, analyze usage, support marketing efforts, and ensure security. Session cookies are used for security and are deleted when your session ends. With your consent, non-essential third-party cookies (such as those from Google Analytics or LinkedIn) may collect personal data like your IP address and browsing behavior, and this information may be shared with those third parties for analytics or marketing purposes. You can manage your cookie preferences through your browser settings or our cookie management tool. Third parties may use collected data according to their own privacy policies.

USE OF PERSONAL INFORMATION

We use Personal Information for the following purposes:

  • Providing Services and Transactions: To deliver requested services, process transactions, and communicate with you.
  • Website Improvement: To enhance website functionality, personalize your experience, and analyze usage.
  • Employment Applications: To process job applications and consider candidates for current and future opportunities.
  • Legal and Regulatory Compliance: To fulfill legal obligations, including tax reporting and responding to lawful requests.

We will not use Personal Information for purposes incompatible with those described above without your consent.

DISCLOSURE OF PERSONAL INFORMATION

We may share Personal Information as follows:

  • With Service Providers: With trusted third parties who perform services on our behalf, subject to confidentiality and security obligations.
  • Business Transactions: In connection with mergers, acquisitions, divestitures, or other business changes, subject to appropriate safeguards.
  • Legal Requirements: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests; to protect our rights, property, or safety; or in emergency situations.
  • With Your Consent: As otherwise disclosed to you at the point of collection or with your explicit consent.
  • Aggregate Anonymous Information: We may provide others with anonymous, aggregated information for marketing, promotion, or similar activities. This data does not identify individuals personally.

We do not sell Personal Information to third parties. We do not share your Personal Information with other people or unaffiliated companies for their direct marketing purposes. Some third-party cookies on our site may collect data for analytics or advertising purposes; you can manage your preferences using our cookie management tool.

DATA RETENTION

We retain Personal Information only as long as necessary to fulfill the purposes for which it was collected, or as required by law, regulation, or contractual obligation. When no longer needed, Personal Information is securely deleted or anonymized.

SECURITY

We implement reasonable and appropriate technical, administrative, and physical safeguards to protect Personal Information against unauthorized access, disclosure, alteration, or destruction. While we strive to protect your information, no security system is impenetrable. You are responsible for maintaining the confidentiality of your account credentials.

LINKS TO OTHER WEBSITES

Our Sites may contain links to third-party websites. We are not responsible for the privacy practices or content of such sites. We encourage you to review the privacy policies of any external websites you visit.

Careers and Job Applications
Devon Energy’s Careers section is accessible via devonenergy.com. When you choose to apply for a job, you will be redirected to a third-party service provider that hosts our job listings and application process. Although the privacy policy linked on the third-party platform is Devon’s Privacy Policy (this page), please be aware that Devon does not control the cookies or tracking technologies that may be used on that platform. These cookies and tracking technologies are managed solely by the third-party service provider and may be subject to their own privacy or cookie policy. Devon’s Privacy Policy governs only the information Devon receives from the third-party provider as part of your job application. For information about cookies or tracking technologies used by the third-party provider, we recommend you consult their privacy or cookie policy or contact them directly.

CHILDREN'S PRIVACY

Our website and services are not directed to children under the age of 18, and we do not knowingly collect Personal Information from children. If we become aware that we have collected Personal Information from a child under 18, we will promptly delete it.

YOUR PRIVACY RIGHTS

Depending on your jurisdiction, you may have the right to:

  1. Access the Personal Information we hold about you
  2. Request correction, update, or deletion of your Personal Information
  3. Restrict or object to the processing of your Personal Information
  4. Request a copy of your Personal Information in a portable and readily usable format
  5. Withdraw consent at any time (where processing is based on consent)
  6. Lodge a complaint with a supervisory authority
  7. Opt out of communications or marketing
  8. Manage cookie preferences
  9. Opt out of the sale of your Personal Information, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects
  10. Not be discriminated against for exercising your privacy rights
  11. Appeal a denial of your privacy rights request (see below)
  12. Provide explicit consent before we process sensitive personal data, as required by law

To exercise these rights, please contact us using the Privacy Contact Form. We may require verification of your identity before fulfilling your request. The verification steps will vary depending on the sensitivity of the Personal Information. We may deny certain requests, or fulfill a request only in part, based on our legal rights and obligations. If you are not satisfied with the outcome of your request, you may submit an appeal by using the same Privacy Contact Form and selecting the appeal inquiry reason.

California residents: Please refer to our California Supplemental Privacy Statement for additional rights under the California Consumer Privacy Act (CCPA).

ENFORCEMENT AND COMPLAINTS

Devon will cooperate with appropriate authorities to resolve any complaints or disputes arising in connection with this Policy. All Devon employees are required to adhere to this Policy, and violations will be investigated and addressed promptly. To inquire or complain about our privacy practices, contact us as described below.

INTERNATIONAL DATA TRANSFERS

If you are located outside the United States, your Personal Information may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate. We take steps to ensure appropriate safeguards are in place for such transfers, as required by applicable law.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy periodically. When we do, we will revise the “Last Updated” date. Material changes will be communicated as required by law. Your continued use of our website after changes are posted constitutes your acceptance of those changes.

HOW TO CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us by filling out our Privacy Contact Form, or by mail at:

Devon Energy Corporation
Attn: Privacy Office
333 West Sheridan Avenue
Oklahoma City, OK 73034
405-228-4800

ADDITIONAL DISCLOSURES

For California residents, please see our California Supplemental Privacy Statement for information regarding your rights under the CCPA and how to exercise them.