Tesoro Corporation

TESORO WEBSITE PRIVACY POLICY

Privacy Pledge

Tesoro Corporation and its subsidiary companies (collectively, “Tesoro”) is committed to honoring the privacy and security of visitors to the Tesoro website (the “Site”). Your privacy is important and we want you to understand our practices with respect to gathering information from visitors to the Site and with respect to the uses we make of that information. We collect your information only to: (i) provide you with the products (including gift cards), services (such as Web casts, and an online employment application process), and information (including E-mail Alerts and Investor Information), that you request; and (ii) to help us provide a better level of service. We strive to protect the security and confidentiality of the information we collect.

Collection and Use of Personally Identifiable Information

Information You Provide Us

When you submit information to this Site (including, but not limited to, completing retail employment applications, information requests and registering for E-mail Alerts or Web casts), you may be asked to provide certain information, including, but not limited to, name, address, date of birth and e-mail address. In the retail employment application and on the various "contacts" and registration pages, we may ask for this personally identifiable information in order to facilitate requests, provide personalized service and communicate separately with a visitor.

This Privacy Policy does not apply to the tesorocard.com site which takes visitors to juniper.com where Juniper Bank collects information, processes applications and issues Tesoro credit cards. Please refer to the Privacy Policy available at the juniper.com site and contact Juniper Bank if you have any questions.

Information Collected Through Technology

We collect information through technology to make our Site more interesting and useful to you. For instance, when you visit this Site, our web servers automatically gather information that allows the Site to communicate with your computer during the visit. We also track such information as the number of visits to the Site, which parts of the Site visitors select, IP address (the Internet address assigned to your computer from your Internet Service Provider), domain type, browser type (e.g., Netscape or Internet Explorer), date and time of day. We use those types of information for statistical purposes that help us design and administer the Site. Those types of information do not disclose personal information that would permit us to identify or locate individual visitors.

“Cookies” are pieces of information that are stored by the browser on a computer's hard drive to enable a user to more easily communicate and interact with a website. We may use cookies to allow visitors to use the Site more easily and to allow us to keep track of certain statistical information that helps us improve the Site. Most browsers are initially set to accept cookies. You may, however, disallow reception of cookies at any time by resetting your Web browser. Tesoro will never use cookies to retrieve information from a computer that is unrelated to our Site or a visitor’s interaction with this Site. Our cookies do not contain personally identifiable information.

As a person browses the Internet, a trail of electronic information is left at each site he or she visits. This information ("click stream" data) can be collected and stored by a site's server. Click stream data can tell us the type of computer and browsing software used, the address of the website from which the visitor linked to our Site, and in some instances, his or her e-mail address. We may use click stream data to determine how much time visitors spend on each page of the Site and how they navigate through the Site. We will only use this information to improve this Site. Any collection or use of click stream data will be anonymous and aggregate, and will not contain any personally identifiable information.

Disclosure of Personally Identifiable Information to Third Parties

We do not sell, trade or rent any personally identifiable information collected from this Site with any third parties, except in the following cases:

(i) to contractors and third parties we use to support our business (such as, fulfillment services, Web hosting facilities or technical support), in which case we will require such third parties to agree to treat your information in accordance with this Privacy Policy and use it for the same purposes;

(ii) in connection with the sale, assignment, or other transfer of all or a portion of the business of Tesoro, in which case we will require any such buyer to agree to treat your information in accordance with this Privacy Policy and use it for the same purposes;

(iii) to respond to valid legal process and law enforcement requests or, where required by applicable laws, court orders, or government regulations;

(iv) to protect and defend our rights and property, including misuse or unauthorized use of the Site; or

(v) to protect the personal safety or property of our users or the public (among other things, this means that if you provide false information or attempt to pose as someone else, information about you may be disclosed as part of any investigation into your actions).

Children

Tesoro is committed to protecting the privacy needs of children and we encourage parents and guardians to take an active role in their children’s online activities and interests. Tesoro does not knowingly collect information from children under the age of 13 and Tesoro does not target its Site to children under 13.

Security

The security and confidentiality of your information is extremely important to us. We have implemented industry standard technical, administrative, and physical security measures to protect your information from unauthorized access and improper use. From time to time, we review our security procedures in order to consider appropriate new technology and methods. Please be aware though that, despite our efforts, no security measures are perfect or impenetrable.

Jurisdiction

Tesoro controls and operates this Site from our offices in the state of Texas in the United States of America. We do not represent that materials on this Site are appropriate or available for use in other locations. Persons who choose to access this Site from other locations do so on their own initiative, and are responsible for compliance with local laws, if and to the extent local laws are applicable. By accessing or visiting this Site, each visitor expressly waives any and all rights, including those related to privacy, to the extent such rights are different and/or in conflict with those rights protected by United States federal or Texas laws. By providing any information to this Site, all users fully understand and unambiguously consent to the collection and processing of such information in the United States. Each visitor further agrees and expressly consents to the exercise of personal jurisdiction in the courts of the State of Texas in connection with any such dispute relating to the content or use or this Site and any information or data communicated through this Site.

Removing Contact Information and Unsubscribing

You can remove your contact information that you previously provided to this site by going to CCBN.

Simply click on this unsubscribe button:

http://www.corporate-ir.net/ireye/unsubscribe.zhtml?t=7078&a=ir-news.

There, you may unsubscribe from certain e-mail communications you previously subscribed to by clicking on unsubscribe links in those e-mails. You may change your e-mail options at any time, by re-entering your e-mail address at the page on the site where you registered and clicking Submit, then adjusting your form entries.

Website Links

This Site contains links to other sites. Tesoro is not responsible for the privacy practices or the content of such third party sites.

Acceptance of this Privacy Policy

By visiting this Site, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not use or access this Site.

Modifications, Additions, and Deletions

We reserve the right to modify, add, or remove parts of this Privacy Policy at any time and we will post those changes on this Site. Please check this Site periodically for changes. Continued use of this Site following the posting of changes constitutes acceptance of these changes. This Privacy Policy was last updated on November 8, 2004.

Questions About this Privacy Policy

If you have a question about this Site or our privacy practices, please contact the Webmaster at:

webmaster@tsocorp.com.