Effective: January 1, 2020

INTRODUCTION

Devon Energy Corporation, either directly or through one its affiliates or subsidiaries (collectively “Devon”), from time to time, requests personal data from individuals with whom it conducts business, including, but not limited to, such individual’s social security number and/or tax identification number (“Personal Information”). Devon is committed to protecting the confidentiality, integrity, and security of your Personal Information. This Privacy Statement discusses the steps we take to protect Personal Information collected on our website. By accessing our content, you consent to the data collection and use practices described in this Privacy Statement.

DATA COLLECTION

Data collected directly from visitors. In most instances, you can visit our website without providing any Personal Information. However, on some pages, we may request certain Personal Information to provide a service or process a transaction you request. Personal Information we collect may include, but is not limited to:

  • Identifiers such as IP address and cookies;
  • Biographical, demographic, and professional information (e.g. date of birth, age, gender, job ti-tle/position, marital status and dependent, spousal and other family information);
  • Information regarding your nationality and country of residence that allows us to determine your eligibility under export control regulations to receive information about certain technolo-gies;
  • Contact details, such as your name, title, company/organization name, email address, tele-phone and fax numbers, and physical address;
  • Division orders, leases, inquiries, public records, and other documents submitted by an indi-vidual or their representative or gathered by Devon while managing ownership interests and revenue distributions associated with an oil and gas property;
  • Internet activity data (e.g. information about your devices, browsing actions and usage patterns that we obtain using cookies, web beacons and similar technologies; and
  • Location data (e.g. data derived from your IP address, country and zip code) and the precise ge-olocation of your mobile device where we have provided notice and choice

You are not required to provide this information. However, if you elect not to provide the requested information, we may not be able to provide the requested service or complete your transaction.

Data collected by automated means. We collect certain data about all visitors to our website, including what pages they access, the number of bytes transferred, the links they click within each respective page, and other actions taken within our website. On certain pages you access, we may connect this information with our identity to determine your potential interests in our operations. We may also use this information to improve our security measures. Additionally, we collect certain standard information that your browser sends to every website you visit, such as your Internet Protocol (IP) address, your browser type and capabilities and language, your operating system, the date and time you access the website, and the website from which you linked to our website. Individuals receiving payments from Devon are assigned unique internal identification numbers that are not associated with an individual's Personal Information. However, the collection of Personal Information is necessary for Devon to fulfill certain legal and regulatory requirements including, without limitation, its obligation to report payments made to individuals to the Internal Revenue Service and other taxing authorities. You should be aware that Devon will use and provide such Personal Information to governmental agencies, including the Internal Revenue Service, when filing Form 1099's for payments such as revenue distributions.

Data gathered through social media pages. When you communicate with us through a Devon Social Media Page, we may receive Personal Information about you such as your user name, profile picture, hometown, email address, or gender. We will use any Personal Information received from social media in accordance with this Privacy Statement.

Data collected through advertising and social media cookies. These cookies are used for advertisements displayed on third-party websites, including social media, and are tailored to your preferences and to help us measure the effectiveness of our advertising campaigns. If you deactivate these cookies, advertising (including ours) will continue to be displayed as you browse the web, although they will not be specific to your personal interests and will therefore be less relevant.

OUR USE OF PERSONAL INFORMATION

Devon will use Personal Information only for the purposes set forth below.

Services and Transactions. We use Personal Information to provide information about Devon services and facilitating use of our website. We strive to offer a consistent experience in interacting with Devon. To accomplish this objective, information collected by our website may be combined with information we collect by other means.

Website Improvement. We may use data about you to improve our website, or to make our website easier to use by eliminating the need for you to repeatedly enter the same information, or by customizing our website and accompanying webpages to your individual preference or interests.

Employment Applications. In connection with a job application, you provide us with data about yourself, including your educational background, resume or curriculum vitae, and other information. We may use this information throughout Devon, its subsidiaries and affiliates, and its joint ventures for employment consideration. We will keep the information for future consideration unless you direct us not to do so.

DISCLOSURE OF PERSONAL INFORMATION

Except as described below, Personal Information you provide to Devon via our website will not be shared outside of Devon without your consent.

Disclosure to service providers. Devon contracts with other companies to provide services on our behalf, such as sending out information and analyzing our website. We provide the foregoing companies with only certain elements of Personal Information they need to provide those services on our behalf. These companies and their employees are prohibited from using Personal Information for any other purposes.

Disclosures in connection with acquisitions or divestitures. Circumstances may arise where, for business reasons, Devon decides to sell, buy, merge, or otherwise reorganize or repurpose certain business activities. Such transactions may involve the disclosure of Personal Information to prospective or actual purchasers or receiving that data from prospective or actual sellers. Although it is Devon’s routine practice to seek protection for information in these types of transactions, we cannot guarantee that any entity receiving such data from Devon in connection with any of these transactions will comply with all the terms of this Privacy Statement.

Disclosure for other reasons. We may disclose Personal Information if required to do so by law or in the good-faith belief that such action is necessary to comply with legal requirements or with legal process served on us, to protect and defend our rights or property, or in any exigent circumstances to protect the personal safety of an individual.

PERSONAL INFORMATION RETENTION

To the extent permitted by applicable law, we retain Personal Information we obtain about you as long as it is needed for the purpose(s) for which we obtained it (in accordance with the provisions of this Privacy Statement), or we have a lawful basis to do so for retaining that information beyond the period for which it is necessary to serve the original purpose for obtaining the Personal Information.

SECURITY

Devon is committed to protecting the security of Personal Information. While no security measure can guarantee against potential compromise of information, Devon employs a variety of security procedures and technologies to help protect data against unauthorized access, use, or disclosure. For example, we store Personal Information you provide on computer systems with limited access that are in cloud storage repositories.

For websites to which you log in, it is your responsibility to ensure the security of your password and to not share this information with others. If you are sharing a computer with anyone, you should always log out before leaving a website to ensure that other subsequent users will not be able to access your data.

LINKS TO OTHER WEBSITES

Our website may contain links to other websites, including those of other companies, professional and government organizations, and publications. These websites operate independently from our website, and we do not control and are not responsible for the content, security or privacy practices employed by other websites. You should review the privacy statements of those websites to determine how they protect and use Personal Information.

CHILDREN

This is a general audience website. Our services, including our websites, platforms and applications, are not directed to children and we do not knowingly collect any Personal Information from children. If we learn that we’ve collected Personal Information of a child under the age of 14, we will use reasonable efforts to delete such information from our systems in a timely manner.

REVIEWING PERSONAL INFORMATION

You may submit requests to review and correct Personal Information collected through our website or submit any inquiries or concerns you may have regarding Personal Information by contacting our Privacy Office at the address in the How to Contact Us section of this Privacy Statement, or by submitting an inquiry through our Privacy Contact Form.

To help protect your privacy, we take reasonable steps to verify your identity before granting access to your information. You can help us to keep data about you accurate by notifying us of any change to your mailing address, phone number, or email address.

YOUR RIGHTS

To the extent provided by the law of your jurisdiction, you may have the right to (1) access certain Personal Information we maintain about you; (2) request that we update, correct, amend, erase, or restrict your Personal Information; or (3) exercise your right to data portability. Where provided by law, you may withdraw consent you previously provided to us or object at any time to the processing of your Personal Information on legitimate grounds relating to your situation, and we will apply your preferences going forward as appropriate.

To exercise these rights, please submit any inquiries or concerns you may have regarding Personal Information contacting our Privacy Office at the address in the How to Contact Us section of this Privacy Statement, or by submitting an inquiry through our Privacy Contact Form.

To help protect your privacy, we take reasonable steps to verify your identity before granting access to your information.

In the event you consider our processing of your Personal Information not to be compliant with the applicable data protection laws, you can initiate an inquiry or concern you may have regarding Personal Information contacting our Privacy Office at the address in the How to Contact Us section of this Privacy Statement, or by submitting an inquiry through our Privacy Contact Form.

California residents seeking to exercise rights afforded to them under the California Consumer Privacy Act may learn more about those rights and the contacts that may be used to submit requests to exercise those rights in our California Supplemental Privacy Statement.

HOW TO CONTACT US

If you have any questions regarding this privacy statement or our handling of Personal Information, please contact us by filling out our Privacy Contact Form, or by mail at:

Devon Energy

Attn: Privacy Office

333 West Sheridan Avenue

Oklahoma City, OK 73034

CHANGES TO THIS PRIVACY STATEMENT

Devon reserves the right to occasionally update this privacy statement. When we do, we will revise the “effective” date at the top of the privacy statement. You should revisit this page periodically to become aware of the most recent privacy terms; your use of the website after such changes have been posted constitutes your agreement to such changes. If this Privacy Statement conflicts with a contract with an individual providing Personal Information or provision of law, such contract or law shall supersede and control over this Privacy Statement.

ADDITIONAL PRIVACY DISCLOSURES

Our California Supplemental Privacy Statement provides additional information regarding our collection and use of Personal Information relating to California residents (through both online channels and offline channels), rights afforded to California residents under the California Consumer Privacy Act (“CCPA”), and contacts California residents may use in seeking to exercise those rights.